last executing test programs: 17.656923361s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac00000010000d04000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa0000090004"], 0xac}}, 0x0) 16.600084155s ago: executing program 4 (id=812): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async) fsopen(0x0, 0x0) (async) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x81, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x2c, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x17a, 0x4, 0x5}, [@country_functional={0x12, 0x24, 0x7, 0x2, 0x81, [0xac, 0xc, 0x1, 0xfffa, 0x8000, 0x2]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xb, 0xdf, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x80, 0x6}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x81, 0x3, 0x1, 0xff, 0x3}, 0xa6, &(0x7f0000000300)={0x5, 0xf, 0xa6, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0xff, 0x2, 0xe, 0xf8}, @generic={0x96, 0x10, 0x1, "cf7227aa35d475378cf77b7bafd78530e200a57f14c1b0ab2612dfb8eb1cdda95a17b603e8d036bf39a0d57335463fa08458fc49fbb41e6994bf5f38c1f9bc69afe52c317f0e47e6355d0458477c9de48b77e27e5112811068721549195b6a77b681116118085058a6ef85100fddbc9f4a80e4e95c8700bab5d37ad25b24300bd13264f9ad41a2e7ead1118c36c2d32cc981e8"}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0x1b, &(0x7f00000003c0)=@string={0x1b, 0x3, "3f668a52702ab03f0edc24f03a032591f5bfb6cd640bc53c18"}}]}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = userfaultfd(0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) io_uring_enter(r3, 0x78ff, 0xb485, 0x4, &(0x7f0000001480)={[0x5]}, 0x8) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011740)=@newtaction={0x18, 0x30, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{0x4}]}, 0x18}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) (async) r6 = dup3(r0, r1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000200)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x810) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 11.468642021s ago: executing program 4 (id=825): mkdir(&(0x7f0000000100)='./file0\x00', 0x91) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x8000020, r0, 0x0) (async) fanotify_mark(r1, 0x1, 0x8000020, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189000, 0xa8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "878068e4b970518865cf92e52cf70fe3"}, @generic={0x0, 0x2}, @eol, @sack={0x5, 0xa, [0x0, 0x4]}, @generic={0x13, 0x2}]}}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRES32=r4]) 8.100663696s ago: executing program 4 (id=830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x6, 0x20040) syz_io_uring_setup(0x918, &(0x7f0000000280)={0x0, 0xb754, 0x20, 0x0, 0x24a, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000300)) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8, 0x0, 0x3}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100767469000c0002800800050064c6d90000000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sched_setscheduler(0x0, 0x2, 0x0) 7.775650602s ago: executing program 1 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, &(0x7f0000000500)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7.771075933s ago: executing program 2 (id=833): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r2, r2, 0x0, 0x800000009) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r4, 0x0, 0x9, 0xc4, &(0x7f00000000c0)="cd4c38e8726de237b52437477c8c38bc795595a1d05b9a99ef4c0c2866c24f91cb0588bdfeebb6c50f05e3a49f0ed61e69b3bc872eefbb86c18d0d884b6fa6dfdd199faf04ebfa3d0032eca39b282b44b94b8ea455c04980a2e776a873feb539a4d9b7941b12ccfe3c19412b82c619f89f13d2e971351373a12cd7beae67a7994eec73076f5a8ee4d8de9a5787f6d0f843d6ac5cf0a6c3a29553c93d9c7c1f26428aa8a4bbf0d56755f7cf7eda3f74fa6333b23d3d7357e1136ec32e42d9011b596b4227"}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x11, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 7.687080085s ago: executing program 0 (id=835): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x98, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = msgget(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x21, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x103f81af530ab711, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) msgrcv(r1, &(0x7f0000000240)={0x0, ""/142}, 0x96, 0x1, 0x800) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x80, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r7, @ANYBLOB="000000f4ffffff14000088e620738d590f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x26c0}, 0x1, 0x0, 0x0, 0xbbe87f18b54b20b5}, 0x4010) 6.719680117s ago: executing program 2 (id=836): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002200)={0x2020}, 0xffffffac) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)=ANY=[@ANYBLOB=',]\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf251200000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000854) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 6.572392649s ago: executing program 0 (id=837): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_op_set_cto\x00', r1, 0x0, 0x81}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x93}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) r8 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000001580), 0x220022, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any}]}}) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001201400000010000100000000000000000000840300"], 0xd0}}, 0x20050800) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) 5.376348748s ago: executing program 3 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 5.366378826s ago: executing program 2 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$user(&(0x7f0000000400), &(0x7f0000001540)={'syz', 0x3}, &(0x7f0000001580)="89d3b50e63579e8f5c98853e1002686650c2eb5b9ca6416bb1a2bc47c258df7d07618cd2df4f7390c034a0e8e7b2afd532c4b4b9126617a885ebdb671adc463373b66057e9c66f02ac1f0cb76ec6cf588764c5eb3276c2dd074b1e7191f19e37ad2b53ac10439345ff25539b6466cf455c702433392e0029198f42fa8559271ba712502676581eecfdf53abaa1c57f6c33ed", 0x92, 0xfffffffffffffff9) r3 = add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @auto=[0x66, 0x64, 0x63, 0x62, 0x37, 0x64, 0x38, 0x62, 0x5e, 0x50, 0xf, 0x32, 0x30, 0x61, 0x62, 0x33]}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) connect(r5, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80) getpeername$netlink(r5, 0x0, &(0x7f00000000c0)) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$dh_compute(0x17, &(0x7f0000001740)={r2, r3, r4}, &(0x7f0000001780)=""/197, 0xc5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004a40)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x9}}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x0, 0x100}]}, @const={0x7, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x70, 0x0, 0x200001, 0x9}, 0x28) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d94", 0xb2}, {&(0x7f0000000480)="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", 0xc00}, {0x0}], 0x3}, 0x4000042) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000000c0)=0x2) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 5.29199831s ago: executing program 1 (id=840): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000340)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2080ff, 0x36) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="757302000000"], 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040)) mmap(&(0x7f00007c6000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000008b40)=[{{&(0x7f00000003c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)="833115c8f041b422f8432b858a648fc02548331dc691439f624ea7b58d94d4d57eb66792c02f3610a94069c73f24c41990a62a6752aeaa821c708dd86ad0144f10aed62928fa592e37e4d566e2811dab175a687ec7882f0f1e1c3d498a77860ace257b923741fdbf380e263c", 0x6c}, {&(0x7f0000000580)="49866e255f01876690bd2a9ce02f45e364c804d90a8786b730e2f2cd13f18821c34ceecea86ec1d0d13acfd93ea8afaef734e4d173b90021fe8020c8f3b0631521c7a3ddd9f2bc11f82a89860df84c8e718af25376896d01d42394921e31c4f2bd46e2b5528b2bfc64c7710b2b3e67b22eb0be90ce48b052fbd4b13a24aa68c8807ade87d731bd597436cf9fe8df0ab245c34cd2b28228fb809f46919413c55a", 0xa0}, {&(0x7f0000000640)="e7cbffae11f6045c64c831bb6b870c1464ae11e3f9a250c4d7c95ee953a9135cecb7cdbe1f3b296c643e6ad9d39073f651a5c4a5370d2e8e293fd8bc20b61178f1e51eae761742426aba2defaf2043d57ce646ec9bdf749fd2db2d546055d69caecd81e939e6373d52be37de29504ae8b1d8f02777cb94ea8f3f13d82aa926443f546cdb1970a68e4337e8c2fb435cdc3a781deaf7d5b2a4ee7cc12157d5141a543403d678c9f5af8020ae96fe9e8a6757dddd9c9acaf3d074732a911ff7466c68e1de8a853b0e8bdf070d3b519f", 0xce}, {&(0x7f00000004c0)="5109e7096a51c8a0d3292717afb173984351d187fc3e9f7cdaace1c15f8f8f12eb7811f706be3dfbb87611404c883711abb5727337f45ae82ec5bb", 0x3b}, {&(0x7f0000000740)="c7d17267cf355d1f22d85c92b3385245be998d910585e929d26675d93810b3a0bb34c6e1a5b42a661f0dca71780377af5e7a6a5d92e531", 0x37}], 0x5, &(0x7f0000003b40)=[@rights={{0x28, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r4, r0, r5, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r6, r0, r4, r2, r6, r6, r6]}}], 0xe0, 0x440d0}}, {{&(0x7f0000000a80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b00)="1d4df535feb993f2e8953cb1f80f4af2caab38a4c6d69fe0389e136d7adc9744ac2795872e33cd1c60c858ce6cc535370338488e117134eea1ef105c8c97630cbcbc6c4ad558a70eeb8b577a296383162b", 0x51}, {&(0x7f0000000b80)="b6e121423e581bb88830e2c53f147aaffd1a9fed9fc1d733ee200074a5095678eb2bfe75f7364b18497277a2fc7b74e703af1292526db8caa6fe79576a3ed788402068a65817b65342a5f72bb3276f3b6e02d6ef6045e48f18920c5612ea47a3e1b311fa3e17558640091632c9740d9e478389c658aa1fc61aef76ac6f15fd3f9d7ffa43a1be892b2bbbe566b5fe02d1f83368", 0x93}], 0x2, &(0x7f0000000d00), 0x0, 0x4000081}}, {{&(0x7f0000000dc0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e40)="fd184e39a172ae2007c3e1a433bf438a18ffd49c33e18cf47878d927c84b516825544186adc1a616f7f9ad767504b95063eb4937308f14de61ac9d5ec664c47cb7b60eb8aaf7a946cb3c96bbf1ac8ab60e07e2ca125601c761299a3943a975e7bd027db693832660f8eb064e41cd26351ed8f167bd0ad2198b08f76a3dffff02c2d9ba251ebb526e56e47ea2a340eee290f46c47eb01fc9279a0c6300a19d604304ff976996c299add08a4b4e81259f8b097bf0157d4cba8030a6d6bbfec1b53584d636d102c3aa2f12b7f1731e73cd4fcca739228971293ca1593cddd5b378fd2c2cf3957f067a581acb773879bc9bd9e", 0xf1}, {&(0x7f0000000f40)}], 0x2, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000fc0)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f00000063c0)=[{&(0x7f0000001040)="23f9b850d0c6e3adcd6ab10c4311126835cb7cbd9b45e81aea90d24686cb5acaaf7c208e8729c05aa531631f4ac99a1c8548afb836b90159472ec5a61acfb13c3a2de79939c35bf0b48716777bc1e76eb793c15fbfda7888e9c15b2e08bb9867ddba0ab27a7f18c6f636125bfb7ba23ac1a2adf104f16cea96b25dd93a75648457cab893b41d6ca9aa08afc9ee4048bdc172bc24bc17f89604c9739194859c3d668058d06f96ab4f2bf3e223701e0b0351ec76958b2249fe354a1657ab2d5048e788e64395197cf46ef149317afe644cffe0f93f6949dc9dcc804d86e40af375ba3e7093e594cf5b3aa31b95cdbfb9e051f5b789bdb4714ef850e3424aad3c1e725b1d5cea7b39fee0f8fc39129d99137c1550773dc1419a7d673b329e8b97111eb37d484d1faf028a8ff8cbf5718a98c0ba788cd324c87f136d3d8eba07559e3af880522227b71aa880d037553bd6751ede61a7dcc4db5ac450bbf7036f3a6048de5c0cb02700ccc96f6f1dd41fb2921553300e6bcbe3030f2e67a16fdadd4ed81f6912b680a823f94f5c54838041a11b12bb641d6b2b748c751b06cbb6a17158fab6659aa4d5fa14ba5cf7b7f57d8743b4c126f6a5b5834093b1ecf58aa914fabc2975948de423b95b68d2a9198435c7892b263178aa7060b6dd4a2d0c77041230ea13156e792c964319b9af7fe8fc1a6e2682ecde44661a3bfaef6175c3c34dbdb5a4a4100cbeb16660107dec9f689e8a8d0499be7703717220934ba568aea74af3acaecc94036ab7bf2c9a440c43c8913a19110bbda9a9057a19dae378e3c73cf0cfa970716e0b740cbd1962f78fb7d70c588e697a118a18056c7b9f84f96ed72f316ec071a9c4765cfe0916d86f2cc49cf7529942ea5d9cb5f5e92fea620e35e1b7382c258835734db16b0af6629788d89fcbb7daef51bef5772334bc7ccf03abf527785be0fba2ec96c8b3245905195a7540122cbebc6fe965b2505c5b424d673ba60f6babba52eead6898c56ab7a8ae2e6601777bd51634a2470e9ddbff7f1de0449e2255791080cc8b75ca3877ce54a72b0e047ef60ad4ad3f4bbc4e7c723f9619972d705afd5f6b0e6c7915afc35240c7ee0f4209c8bd0b3ecd3486f084cd231d16b3e6f5baa49a91aff1688fa1895df58b6a6183b73da3378ebac78239241fade167f84cc59b47d993c3cad97fc5ad831abe69bfefb7566b55816aead533f7d3c8675a0a8652170a14b3000fbf4e6df3af5bef1000a9fb89a128f623a90dea16029ccd795568ab6673c8ab1c86c1b5db01ac39f6720108b9c1a8315a18dafbc782d1826f21f64ab2faaadb5b30aa88b903d32031b69af00602146c3861260a9d40dff62d2b8cbe8565e271ae725cd3078a127bd921f45d8745e69e8a20ba64af0f2571ca326ab82388b0b8edbbe33a4b7012aeca95164b822ce723332d33ee4b0009193953018ca3bdd300033e99353cce1b6e030be954f6b88173d1d939e7cdac11c89d719a6725c302fb101cabfe9bc887139cd305d1a709b4039879b49ecb6fb801a49d71ed231f8ad436a9bc11fdf247823447b4fcbd9c5610888e2469be90d970d0200034430abe1ff478d9cdb54bccd8cd2a1a9dbd73c35a4b026bfd3a87b3c5a6d02c433f96e5f1885dc31ff5d4ab45d3f46e428fdf568fe70d556b264c6fb8ae02301a6bb15060086770696441935b9b758e72ea37f318b28a6218482bac98968db4a307de724031d45978a4e02b3c92e32175ed70c7f0a78f2995002c1347ee27d35f677ea87e2663bf851b89fe7630c0a98eece0047fbb99b00bb3a7500d50b62bdeffa786ed3c8da3740178bfc58822b9b3dcff18164e6a7a3f44a77ad5c0f2b852ecbb22381b7f07a0e94527e7dfd214e175c29e027b2dfcf09dbd1d00241ca0904771412bd2ed20dfadd0eeae0c784bb039e06d0747753fd5a92b63a17f93b3c36936b106d4dbcfeb58ced2e3388d2c3e027891afa3c29bf7e36931c19271c5ac4dafdc52fbd45f6188a5e8377de47363d1f95d672aad7d70005dccf80b6f3b47d553aa2f0eacbbd985e5b62fa765599b70ec1b3b353c5e4431cb9c9de2ed8d98869d3803d700f856c8a31abd9840893e442fd595e93fbe6f7b41ada492fa8f88e8b51be37769450596ac6609baf0308d2110af0297005e8608ec0b6e97270b5c8897bb5fb06622690e87c781c3eaa732e11314be4f639841b4e06fedf015e03f19be71c688aa3d81c9572354f7b54f3f97d359ad58d5e4b6af0eb7f2194a8a376a257b8cbd5e684760af6ce7963a6823bd2f94755806dc6ce0b6e927010d04ee6e0de07045e0ab7ba4c59966ac69e8a97bebaa83e00ec29d976a977054d2f451020574a1cb4fc137bf6a7dce9598426db501b374cbb0732bd040a68dd4efd197825cce9410e7bf7b6348df0040bf6bf9e42c6433be3216796a5f55864fa89a9ca62f0b10b30f09148ffda369c8fc8b4a0c49f8830542fd32de7b69c18dc483c9d42a205ef3ac5eb44326878099013d1e683f4402f0ccd46b520665140cea0b9c3e7171b76a0869c2c89b48a7e32699f6937caf6dea137f6a95ba1f5e0f788eae1153534692a8dc3d21df1d02d0128bceafe0af1956b2403eaddc9f117ccb14b7be3f527f10185bff40ae84e7b3c3d877176fa437266d6a1beeb1bcbc9ec11967ca431cd102fc7adde59f7b724abac1e1ee86232edbbf1ff0231e9b5a5965bbd4649e23c503e8aeabe2bf51764369b46a13a007efcfc73f5ef4dd6ba1ea35298adff72d8562ec8f20fbbfefb2051fa00b77f063150950bd68a7c6e95f94f382d5309633390e8d1d6f483d428d147be79c1437deafd24e06ec7dc1bf36da8ea9d8f9e89cf35765a486d7c7b3e7a5012855c332914b0b711d5f11101f92efd4491272126e53afaba65a5008350c7a65867c885aaca6f3c84c9b8e65392a9470be2093cb7f876de269470eaf77b89e99b7d3dde7e93d855118577ece84b0fc609a7383cac326829cb7d6ea14e65901ad5835c76d42e9806f9f63ec4c1c1c0ebf20610ed3ce559d48d778a3b63280a746f4fa7adf026b359b3d2fbe548c6c872af9da9f5f4dacd91941e8474673920fa8a553a8be4b7b9be79f5dba9ab26bc0cda11e8f8f2dc44e370fa00d60c501db5358e7b9736c868b3f5870d6e5e6f0c00a0d0e185761a9f5b5cb612e402d96c97c9cfec0da191347d02ab5d9dfad976008cce9a189d9aaff9485c657fa8f55cf1dfb5edaac5d67a3ca9175c77e5487d67798aab291c6a132cbed80a7f1115f525bce2d3ed6452c85c62510baa58f84b514022cab946b5fb6fcdcdc9932ce02271fbbcb6a8c4e85ca6b1547c37871047d22628bfdfe45dce9e4055c7e054e1db1397e02b3c7cdb4f3560809dc4f28f2440c4997a73825acf1ea3167ff34f30042a8b5b3ddbe40b9681cb36c32c21542f935f5054ece25951411d95e0edc565d7f12f8a9bb4f79a45e1957efc5e758ef5e24606393fa3e5c94f6e6df0b3f81652f9944b88d34c65432b853fd51c91d64c3f5ba232bd5456f82061d3e10525830ab82ebfc953c863c6915a5ef80c99b86fc8551019ce4a01cfbf57c0d752a55f0001473e08aa978a8713ef27aa3c29b7a8bf8a7da550732c05433eb8d34b63059a776820f9b15a6d0f2ef3494469151a552d530fec3710f53baa3356e4dfd33a4ff9cb117638a443eaebce95a9e5868a991d0f8b5b30680a6eb6ef2ed0e765f1605a57825bd8e49514e0744176c9d973df2fa4cf115211b7d6099b15812125ca358ca88d1f253df19753e85bfcc395f887101c8497f5d45ae9cd164c11caa7bb4dbb009d2ec370baae62c68572c938c53be19867c747f75fb4015ef4203ab40599cb75a27d1d5e4becb3359d32b285b90244ffa538c5c89649c0a30f6b4844ac5aab7ef35032d417a0bc035db929dbfdf5ba55c8b5ce2e85f56aafded36f45baa2fa1d8f9bfe8603b039a5237a7279616bea133026fb76dc6e081dfffdb69c377cde4df604ec28dbdffada4c1721aa7f164b4849a67fcbf9c85bd5162d573281a21eed3f1d8dd855624e5590e4dfb9493adcc8552a03c3443d2348340542dad38c68d2fd361116d23717ce3ba6b62fd358e9e502ab684307b1c3b87eb087dfce999c1288bc75b4ea04486aa6bfea29612b75af634665db39515521a1ef19b3b87a72dcd32d5cee20f1ab219273a8daff8d63d3c06d13214f58fec89e75d7bb13d8d3d1c394442336952481fcc922c9d8566e64e0160f682d5a9fd9a58081f299e38da02d811cc16f1804f7763b9c9c643fb9fbd3d0328c2558ce41e43b7e9fa3ef2544f18dad5874779ae99c3d48ee3bacf8f056bf4fd44f432ea795e76298dc5af035ac137350ba07e337e30c9f9cd876c88070b36943110c31cebb414ca4b53734fb01ad6ed3928b12aadd22b70fa249f72f06fd679f9804ca1f2ce39a3ec95a720ac0ffb18e5a682c5af2702efa839316d6885db94d1c1575c0917709cbca5ac10adeb405d54226b50cfce7d5a234ebecabfecfdd7af094479f4f868324696ae68725abfaa9c6252ffacb8775a44cc57a0e280385574ce7d0c9f289e99a4b49e4f62f9951a8362fcd303f684f5b9a438d92e325b5fbf940204a131deefcff54fefb84155400ff8132ebc679167a79aa001238235567ab2c3e511930d347da2f30472a9750ed3a982f53c4bd7443cb95878d0c39750d0c75d69f09c6e15e7807129b7d641d8bc10278cbda587d2b9b214aa56e61dc199a8aaaf2932b413be773e5bbd0a38780f3cd0f9f87d51d3aaa6f9d0db0cfcbf4d90d2af18e3c6871b29c5786caf5736b4fc1a9ed89af6cfbaaa37db231bc669dfc52761c48a90c667751d11ceb6476852d06efb1d7c32188d215931ab14e8fff9d9e0bcb3a542a574443d92bb98c9822ed3ee9d8842f3fdc5f36233bb1296f3ee6e96d63f00e625920a5a86734492a679e54a60c60b8b9ccf3252ee79197ec696a09e84bf0c7480df52656165f68daaff031aad6fa0d47501875046241e9e09d6254a2e4dae02cdee4fc76d33f85018659465dd0d4b21bc2c54e02f0b43db890462950cdc99c78982caf674b21405cbb923107c3583c80c9a4e66bf2b17ccc4ae650dc1e5c5c4b070f28c168267b334b31af82112e3fc7b57b917fc99c133fbcd9b21ef3daf674c129dfa48e8b5e28306c63e6b72ec71a941eab8cae360ad9c2ae7e694fd4ec383946aad929c5a51d2095df8a6918e845d4ed3fd241c044b797916ec5ab032477d6b01710a4b82022228aa048e8ede153cca14b72d019111c3037a74e16bc2e6df926d130f42b72b7c9a703345fd42f08e5ec478c20c4ed86368d141547837a848417b4300daba76d2e902f16e523c6697cf9e1c254d62cd3db3437d0fa5d8d21a0caff0c2a0e3c93b6b2825f7e6c509479a46efa9ee6c4ec5e6e3a10405abe5c671caa34329a15e5fec00369802608e802dbaa424a70e73c55fbc27b1ae14739802ea3d1e008157dcbdc294ca29772c6c4a11f4b099b8be2ee7760009b52017791e4bbe89a50ecf06a550905d3b14f4a4056a15ca0b7f05b24b632f2f08e101592ab2146fa125396aac5173a43a84207d36a9140379b91beb7ab40d22d946a243d58d2fbb2f557c5ab6490fe4d80105f22364d14c1747414fb2fa591c71556630658f8c23dd59c8c6bf1e194c7b6291a08aca48372a09200a41c2d2f8d08e0957047bd5467953b72a34d7cd5fd0aa4f35699bacef15c3b970accabfa41395e2dadb0d30d8bd17e5fb11a2", 0x1000}, {&(0x7f0000006280)="99d6980e6fe3acd537d6b7a902ff64f8cdeb9c51f4cd62ee8012c7ab3144680f9047b4f9c4b91c5ca868f5ff8b85f5a476e16ed3931c091a35b973c97a699751828a74205230613d9f8a2d0207f0e2782c44", 0x52}, {&(0x7f0000002040)="7e28a8e9d023c24c540d55d7dc44cefe7bca", 0x12}, {&(0x7f0000006300)="d4693a5c6cf6029e766efbdfc8df114bbed55bdf64b2d1ed9ca791723f876eeae8cfb9135869ff34916fc3bf976b2ceecf0673d61f05d5c2fafdec89c97c63504af6d7394c943f4d178f1eacba02f9cb4815f166cc09e3fea71a1e5a70848af5f2ada6b2169b3ee6260a375ce4917cdc2a683969648755ec572a01a0f14bc4cc304020317d911827bb37daa5f77118e5e21ab0584e8329d1", 0x98}], 0x4, &(0x7f0000006400)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}], 0x40, 0x20000810}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006480)="e085d49fd35fcd8583cb31121f86d752d6aa7afd0d8e79256aef86e5af73c0df4aa7aa63833dcf966b7fa264", 0x2c}, {&(0x7f00000064c0)="295ad546067c8b3f1d4fe045bb762ed74c69f69b8734746088e35281a4e9b83a08ac17ab44206fad0b3d295a2e8dfb95bef4a144204aed9bbcbb1ccf1f3bd59ead6757df755c42aa2a98c1e45abdd0", 0x4f}], 0x2, &(0x7f00000086c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xe8, 0x10}}, {{&(0x7f00000087c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000089c0)=[{&(0x7f0000008840)="33445c39590a92e5151521aec1ce852d20ebbc8ce5623f5233df00dc7d8e8a09be70d12258466f086d18c2881ed4d75d6571c72518d00932c783e35f004717b787222efc7ce7aff30383ae9bbe9b58888cf3ed416474ae72ed7edcf314d14d8e2013f1d8558273f3cb0c016a728f", 0x6e}, {&(0x7f00000088c0)="7090f5f5730457c1b1faca30636de7441aa030417f801923f9ab8a2eca6a402ff4b4275028df94474a574ff08f52e806d05c62c2744741d580674d6951259cfb869d8dad9d8e27fd232c1e303e5285fe326422a6c1aab3ede2ebcbeca3e29281f8972269638ba6402af8b150037665d1988e638ee98bdf08880639edc51f376d23147c13813e8c627579d9ca2e448712505ad54fd2a43fa7028f75fe513211f966daf63fe7dd919470ee24e110272f5da5f6b0c0df3958dde41f60a2b39eba362761e974bf93c56f5d0604abf900b2b4f6b5ee41ce65169fdb69cc1e3d108c38d906b20c14348b9b493f5aa2c6594391a7", 0xf1}], 0x2, &(0x7f0000000980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r6, r6, r5, r4, 0xffffffffffffffff, r0]}}], 0xc0, 0x2000c000}}], 0x6, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=""/128, 0x80}, 0xffff}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000c80)=""/94, 0x5e}, {&(0x7f0000000940)=""/12, 0xc}, {&(0x7f0000000f40)=""/7, 0x7}, {&(0x7f0000003080)=""/222, 0xde}, {&(0x7f0000003180)=""/31, 0x1f}], 0x6, &(0x7f0000003240)=""/136, 0x88}, 0x10001}, {{&(0x7f0000003300)=@ax25={{0x3, @netrom}, [@netrom, @default, @rose, @null, @bcast, @default, @rose, @netrom]}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003380)=""/113, 0x71}, {&(0x7f0000003400)=""/85, 0x55}, {&(0x7f0000003480)=""/96, 0x60}, {&(0x7f0000003500)=""/140, 0x8c}], 0x4, &(0x7f0000003600)=""/80, 0x50}}, {{&(0x7f0000003680)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003700)=""/95, 0x5f}, {&(0x7f0000003780)=""/148, 0x94}, {&(0x7f0000003840)=""/147, 0x93}, {&(0x7f0000003900)=""/21, 0x15}], 0x4, &(0x7f0000003980)=""/147, 0x93}, 0x6}], 0x4, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ustat(0x801, &(0x7f0000000300)) accept4(r0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 5.29115427s ago: executing program 3 (id=841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x0, 0x3, "679e23066f854e45ff80bf975376eeeb108dbe082f6da44b1701d8ccd5becd4b5404fc27627d9e99d0eda2bdd6a53498f8ac7e39ca3466c6763fa4c43210d08ed7819deaa3fb40dc733a3bc9d4ff43ab24512e098c621aae214cdd033cfa04e29cca3574b5f777a2047691e232fcc442f86a4f691c5bb8f4f912c7b2de67f151ba3410fc845f0233deda21d9ebb2e23bbbc52ca1cf621a3aaee40d971629339fe5d738e5d88648"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0x64, @string={0x64, 0x3, "1e7b8fb4758a564f5684d9e75f4cdbd62188ee8892d354febb2b2f25257b38ebf796aec7797bf85df88f9a2ce8c3134ed2e78828075991a4b4bf83d2c1fba6c9f0d4a759097f1899673f0b284b39875d7ffc3e40721f04c857d1c5371c5c22cf096b"}}, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x6, "9f"}, @local=@item_4={0x3, 0x2, 0x1, "a8cbf746"}, @local=@item_4={0x3, 0x2, 0x4, "135137e8"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0xa36}}}}, &(0x7f0000002780)={0x2c, &(0x7f00000025c0)={0x0, 0xb, 0xb5, "616ea2c47bae27008b46e068fe93831c5175108e3125c7ab89edcccc7ee59bdb9848e3850b7bdd7c15b2af5ae70913fc19b1dfa625bba1e5f27cb6c441afe7a62a7942a96837106f365c98e8c6718bd566748e4ddd953a5603f8d3627c5a9cc950827652e823b953e3848a08ae922c5c14eb6575e0575875660bd9eb37741a2349648be0ebf1a1f6a0290f1a044fc741a1d09c061058c4265a4574fdb761994d6bca13b5a24d87dde77315e4eff1e58c74c5b23159"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x1, 0x7e, "a653d8232af7d67002679c17ab9aab29f66818ddd0fa10a04ee0858cd5c41c7e166972db85d473bb89bb03050119a8439f940edcc387080a15560e26f6dc4111ef51b8a2574987256a4a58161fc3ea29c18951eeec765587c6f14119dbbf3d88091da49bbae1c10f1b9bd73076c8abec66d5d393466dafe4b97008f1a967"}, &(0x7f0000002740)={0x20, 0x3, 0x1, 0x6}}) 4.641578606s ago: executing program 3 (id=842): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x58}}, 0x800) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000140)=0x8000000000000000, 0xd, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004f84dc103"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) 4.417424334s ago: executing program 1 (id=843): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000010, &(0x7f0000000280)={[], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}, {@fowner_gt={'fowner>', r1}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfsroot={'smackfsroot', 0x3d, 'C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n', r2}}, {@uid_gt={'uid>', r3}}]}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r7 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="0400009c97db418ea164db301abe02963e00"], 0x1c}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x1, 0x3, 0x3, 0x0, 0x98}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) chdir(&(0x7f0000000440)='./bus\x00') r9 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080), 0x7f03) 4.033287369s ago: executing program 1 (id=845): r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000540)="c75a98", 0x3, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000240)=';', 0x1, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fdatasync(r5) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 3.895388582s ago: executing program 3 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x0) (async) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4c, 0x280) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x34004000}, 0xc, &(0x7f0000001400)={&(0x7f0000000280)={0x1164, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x18, 0x45, "5f3d3264a368d1457a80625590c4bb38a9892708"}, @NL80211_ATTR_TESTDATA={0x3c, 0x45, "47303d7dcf31daa6d28df41ee01a94d8081a9a79a7abd6ad4f199bb467e7bd166eda583129aa9a5e164ed987aac971456dd7d9e46fa0d73c"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xa3, 0x45, "7ffe6775a52c8a252e04c65f04998ec9bbdb28a4d2f019a4579bbb3d767fa4f7a6df5d544a60d6fe2961c63b97cee34db2f41fb7726bc954be68abe99dbd3c780ee0b19b8e9cf38be452ae2e766f71ae4d3936498c3ca70308d3bb13c36766b1223c068fee31630d9d2a49bc86a9c5ae0f1c13a50d8a71969e4d18061de502af987abecbd3db9c4b9853f14b89e73254a996776fc4c555b054db1c71324f1f"}, @NL80211_ATTR_TESTDATA={0x51, 0x45, "5aedc3f82340dd67b4e63aee852a8827487bf0fc8d2f6bbb7a9f2be5b4a96b8cd7fe2ce3a21535ff87f84460de545f58beff32b160f815e52293ba7d0562143af2fca7b48d98395b00f6527ab7"}]}, 0x1164}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) ppoll(&(0x7f0000001480)=[{r0, 0x204}, {r0, 0x2000}, {r0, 0x404}, {r0}, {r0}, {r0, 0x2}, {r0, 0x1108}, {r0, 0x20}], 0x8, &(0x7f0000001500)={r5, r6+10000000}, &(0x7f0000001540)={[0x1ff]}, 0x8) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001580)={'wg2\x00'}) userfaultfd(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000001600)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f00000016c0)="f6e67531f0cd7d6930e29bb71ab6a0e57f912c84ea031d09c7b17d47a1576ab2633c5beb9ea7992893ff9d6d91f4ce205e73a8abf6f494bea3bb80a79a45e48976f0d3f8d7b0a37a69c9bd4338ad0bfd6520ee2fb8d15eec5654127bc5", 0x5d) (async) recvmsg$unix(r9, &(0x7f0000001e80)={&(0x7f0000001740), 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000017c0)=""/196, 0xc4}, {&(0x7f00000018c0)=""/2, 0x2}, {&(0x7f0000001900)=""/43, 0x2b}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)=""/205, 0xcd}, {&(0x7f0000001ac0)=""/180, 0xb4}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000001d80)=""/48, 0x30}], 0x9}, 0x100) (async) r10 = open(&(0x7f0000001ec0)='./file0\x00', 0x106c1, 0x165) (async) lseek(r3, 0xac2, 0x0) (async) r11 = ioctl$USERFAULTFD_IOC_NEW(r9, 0xaa00) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000001f00)={0xaa, 0x62}) (async) ftruncate(r9, 0x6) (async) r12 = eventfd2(0x7, 0x800) (async) setns(r10, 0x40000000) (async) accept4(r10, &(0x7f0000001f40)=@ax25={{0x3, @default}, [@null, @remote, @default, @rose, @bcast, @remote, @rose, @rose]}, &(0x7f0000001fc0)=0x80, 0x0) flistxattr(r12, &(0x7f0000002000)=""/86, 0x56) (async) r13 = eventfd2(0xffff33fe, 0x80001) ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000002080)={0x2, r13}) (async) syz_io_uring_setup(0x44b8, &(0x7f00000020c0)={0x0, 0x1955, 0x400, 0x3, 0xc1, 0x0, r3}, &(0x7f0000002140)=0x0, &(0x7f0000002180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x10c, &(0x7f00000021c0)=0x29bf, 0x0, 0x4) 3.751121369s ago: executing program 2 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000110001002dbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="012200c86a1fb2652d1f075a88c73f43a8fe67f86d184f898c85bfa9277a0000080000"], 0x20}}, 0x40040) 3.228174128s ago: executing program 3 (id=848): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000000), 0x4) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x501801) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) (async) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) acct(0x0) (async) acct(0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000200000012cbd7010fcdbdf250200c0001000000212000000"], 0x1c}}, 0x0) 3.009714565s ago: executing program 1 (id=849): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f0000000300)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e23, 0x10000, 0x1000, 0x80012d5a, 0x12d5c}}, 0x44) 2.286339428s ago: executing program 0 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000020000000000000181200f5", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1484c65a00d43e906111740000000000180000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000980)=""/239, 0xef}], 0x2, &(0x7f0000000280)=""/18, 0x12}, 0x3}, {{&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000880)=""/171, 0xab}], 0x1, &(0x7f0000000a80)=""/198, 0xc6}, 0x1e4}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000003640)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/130, 0x82}, {&(0x7f0000002080)=""/168, 0xa8}, {&(0x7f0000003440)=""/163, 0xa3}], 0x5, &(0x7f0000002140)=""/165, 0xa5}, 0x5}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002200)=""/177, 0xb1}, {&(0x7f00000022c0)=""/89, 0x59}, {&(0x7f0000002340)=""/38, 0x26}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x4, &(0x7f00000033c0)=""/127, 0x7f}, 0x6}], 0x4, 0x80038002, 0x0) r9 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x290, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0x70, 0x98, 0x1ba, {0x46010000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) timer_delete(0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x10000, @value=r12}, 0x28) 2.21108053s ago: executing program 2 (id=851): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) 1.976428856s ago: executing program 1 (id=852): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x0, 0x3, "679e23066f854e45ff80bf975376eeeb108dbe082f6da44b1701d8ccd5becd4b5404fc27627d9e99d0eda2bdd6a53498f8ac7e39ca3466c6763fa4c43210d08ed7819deaa3fb40dc733a3bc9d4ff43ab24512e098c621aae214cdd033cfa04e29cca3574b5f777a2047691e232fcc442f86a4f691c5bb8f4f912c7b2de67f151ba3410fc845f0233deda21d9ebb2e23bbbc52ca1cf621a3aaee40d971629339fe5d738e5d88648"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0x64, @string={0x64, 0x3, "1e7b8fb4758a564f5684d9e75f4cdbd62188ee8892d354febb2b2f25257b38ebf796aec7797bf85df88f9a2ce8c3134ed2e78828075991a4b4bf83d2c1fba6c9f0d4a759097f1899673f0b284b39875d7ffc3e40721f04c857d1c5371c5c22cf096b"}}, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x6, "9f"}, @local=@item_4={0x3, 0x2, 0x1, "a8cbf746"}, @local=@item_4={0x3, 0x2, 0x4, "135137e8"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0xa36}}}}, &(0x7f0000002780)={0x2c, &(0x7f00000025c0)={0x0, 0xb, 0xb5, "616ea2c47bae27008b46e068fe93831c5175108e3125c7ab89edcccc7ee59bdb9848e3850b7bdd7c15b2af5ae70913fc19b1dfa625bba1e5f27cb6c441afe7a62a7942a96837106f365c98e8c6718bd566748e4ddd953a5603f8d3627c5a9cc950827652e823b953e3848a08ae922c5c14eb6575e0575875660bd9eb37741a2349648be0ebf1a1f6a0290f1a044fc741a1d09c061058c4265a4574fdb761994d6bca13b5a24d87dde77315e4eff1e58c74c5b23159"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x1, 0x7e, "a653d8232af7d67002679c17ab9aab29f66818ddd0fa10a04ee0858cd5c41c7e166972db85d473bb89bb03050119a8439f940edcc387080a15560e26f6dc4111ef51b8a2574987256a4a58161fc3ea29c18951eeec765587c6f14119dbbf3d88091da49bbae1c10f1b9bd73076c8abec66d5d393466dafe4b97008f1a967"}, &(0x7f0000002740)={0x20, 0x3, 0x1, 0x6}}) 1.828985s ago: executing program 0 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffffff, 0x0, 0x32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.714217545s ago: executing program 4 (id=854): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) fanotify_init(0x8, 0x40000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x3, 0x1000000}], 0x0, 0x0, 0x0}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 826.978322ms ago: executing program 0 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x14) r2 = gettid() tkill(r2, 0x12) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x14, r4, 0x1, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000440)={0x0}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='kvm_ioapic_set_irq\x00', r9}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r9}) 205.833631ms ago: executing program 0 (id=856): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1, 0x1}, 0x1c) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r2, &(0x7f0000000540)={{0x3, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="123daf1cd47059fd140e00001e7a0102030109010000000009040000008b1bbc635fa43545142fb6f0a9bc4f7c2797f1f8dfee909b93a55b5dcc1f823b501ca75e315fc993aa12da9338b502d64bb9eb380a36beb3d62e549023ea3e055bb12ab8f36afcfb4be472b5eb789d7bb9cbeeb4e8d8479d34030e3f36c62aaa144c76a1b85fcfc030e18d57cf521235446c1d127b18445ea3b0599e914fec0a98b9372fae71841271d0be2d27542e540e6b0f788d4b272bb3ede11adf203c4832f3e2b0b08af66d48944653b6698948063998bebae90d4a1213fa6aee0f79dcc87b46d72def8285a26445492c8d457d674881b0ccba36fc20d1a3e5381206a5f4f810bc0995cb4584360540c258cb93d4a2366b274f656ee9"], 0x0) 28.573714ms ago: executing program 3 (id=857): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000"/80], 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 0s ago: executing program 2 (id=858): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000070000000700392cdaab4a2f41c0d8faef3d67d10be1d109082c71d425b9b89d393d3ffffe818f79268e9ab49ffdc50b32e4320d30b092af3eaaf8a7698a559444790c28128b9f260618e76f496f5a1b6124120c86e37c7821ed3693e409358750a8d943433e6a2a2572b3985a34b969d4c5dc7badec4bac20ac96ad7b74e858b7e4146fffdc4bb1c06e8ec8d15f100c9ca20a19d02ca38c9b6f6227d78938c4fec32d33e6785ce9e5e783d69e3055a9ea25e557dd1f05dae3403a28e9cbd314cc144f36f4c0296851faccea4bbd6bd6ddf521d2e8cb4ede5832f8"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 400 audit(1753414201.668:293): avc: denied { connect } for pid=6536 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.173696][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.187724][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.219931][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.249402][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.260827][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.306331][ T10] usb 1-1: SerialNumber: syz [ 111.495904][ T6550] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.311675][ T10] usb 1-1: 0:2 : does not exist [ 112.316774][ T10] usb 1-1: unit 5 not found! [ 112.344328][ T10] usb 1-1: USB disconnect, device number 6 [ 112.350901][ T9] usb 3-1: device descriptor read/64, error -71 [ 112.615793][ T30] audit: type=1400 audit(1753414203.078:294): avc: denied { setopt } for pid=6548 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.928042][ T6556] __nla_validate_parse: 2 callbacks suppressed [ 112.928065][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.942172][ T9] usb usb3-port1: attempt power cycle [ 113.261345][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.324358][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 113.333375][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 113.346673][ T30] audit: type=1400 audit(1753414203.918:295): avc: denied { watch_mount } for pid=6555 comm="syz.2.157" path="/35" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.480238][ T30] audit: type=1400 audit(1753414203.918:296): avc: denied { watch_reads } for pid=6555 comm="syz.2.157" path="/35" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.735737][ T30] audit: type=1400 audit(1753414204.118:297): avc: denied { ioctl } for pid=6562 comm="syz.4.159" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.773000][ T30] audit: type=1400 audit(1753414204.168:298): avc: denied { create } for pid=6562 comm="syz.4.159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.831715][ T30] audit: type=1400 audit(1753414204.178:299): avc: denied { mounton } for pid=6562 comm="syz.4.159" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.930895][ T5949] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.032268][ T6573] trusted_key: encrypted_key: insufficient parameters specified [ 114.185138][ T5949] usb 2-1: device descriptor read/64, error -71 [ 114.515107][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.164'. [ 114.524054][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 114.533906][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.164'. [ 114.543701][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.164'. [ 114.828985][ T5949] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.923181][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 114.923196][ T30] audit: type=1400 audit(1753414205.518:302): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.961017][ T5949] usb 2-1: device descriptor read/64, error -71 [ 115.018330][ T30] audit: type=1400 audit(1753414205.608:303): avc: denied { transfer } for pid=6588 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.079865][ T5949] usb usb2-port1: attempt power cycle [ 115.278267][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 115.838439][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 115.870957][ T5949] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.905491][ T5949] usb 2-1: device descriptor read/8, error -71 [ 116.525986][ T5949] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.594763][ T5949] usb 2-1: device descriptor read/8, error -71 [ 116.733081][ T5949] usb usb2-port1: unable to enumerate USB device [ 116.809467][ T30] audit: type=1400 audit(1753414207.398:304): avc: denied { read } for pid=6576 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.047200][ T30] audit: type=1400 audit(1753414207.638:305): avc: denied { name_bind } for pid=6594 comm="syz.0.168" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.310929][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.674886][ T30] audit: type=1400 audit(1753414208.268:306): avc: denied { read } for pid=6613 comm="syz.1.171" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.674923][ T30] audit: type=1400 audit(1753414208.268:307): avc: denied { open } for pid=6613 comm="syz.1.171" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.683164][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 117.687129][ T9] usb 1-1: config 51 has too many interfaces: 58, using maximum allowed: 32 [ 117.687146][ T9] usb 1-1: config 51 has an invalid descriptor of length 1, skipping remainder of the config [ 117.687156][ T9] usb 1-1: config 51 has 0 interfaces, different from the descriptor's value: 58 [ 117.689618][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 117.689634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.689645][ T9] usb 1-1: Product: syz [ 117.689653][ T9] usb 1-1: Manufacturer: syz [ 117.689662][ T9] usb 1-1: SerialNumber: syz [ 117.922742][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'. [ 118.234966][ T2161] hid-generic 0000:0400:2000.0002: unknown main item tag 0x0 [ 118.247059][ T2161] hid-generic 0000:0400:2000.0002: hidraw0: HID v1.00 Device [syz0] on syz0 [ 119.168792][ T30] audit: type=1400 audit(1753414209.758:308): avc: denied { getopt } for pid=6626 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.201865][ T30] audit: type=1400 audit(1753414209.758:309): avc: denied { create } for pid=6626 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.886458][ T30] audit: type=1400 audit(1753414209.758:310): avc: denied { getopt } for pid=6626 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.906251][ T30] audit: type=1400 audit(1753414209.948:311): avc: denied { bind } for pid=6628 comm="syz.3.176" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.930827][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.939382][ T30] audit: type=1400 audit(1753414209.948:312): avc: denied { node_bind } for pid=6628 comm="syz.3.176" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 120.129458][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 120.144470][ T5891] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 120.158497][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.181564][ T5891] usb 2-1: Product: syz [ 120.185750][ T5891] usb 2-1: Manufacturer: syz [ 120.263205][ T5891] usb 2-1: SerialNumber: syz [ 120.313570][ T5891] usb 2-1: config 0 descriptor?? [ 120.362295][ T5891] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 120.461176][ T9] usb 1-1: USB disconnect, device number 7 [ 121.530839][ T2161] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 121.912009][ T5891] gspca_topro: reg_w err -110 [ 121.941427][ T5891] gspca_topro: Sensor soi763a [ 122.163505][ T2161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.186914][ T2161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.200870][ T2161] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.223187][ T2161] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.233284][ T2161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.270934][ T2161] usb 1-1: config 0 descriptor?? [ 122.283336][ T30] audit: type=1400 audit(1753414212.868:313): avc: denied { listen } for pid=6667 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.476105][ T30] audit: type=1400 audit(1753414212.918:314): avc: denied { ioctl } for pid=6667 comm="syz.2.186" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.638118][ T5891] usb 2-1: USB disconnect, device number 9 [ 122.694816][ T2161] microsoft 0003:045E:07DA.0003: unknown main item tag 0x1 [ 122.728321][ T2161] microsoft 0003:045E:07DA.0003: reserved main item tag 0xd [ 122.740496][ T2161] microsoft 0003:045E:07DA.0003: item fetching failed at offset 33/34 [ 122.764855][ T6676] binder: BINDER_SET_CONTEXT_MGR already set [ 122.775749][ T2161] microsoft 0003:045E:07DA.0003: parse failed [ 122.788514][ T6676] binder: 6675:6676 ioctl 4018620d 200000000040 returned -16 [ 122.803556][ T2161] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 122.849052][ T30] audit: type=1400 audit(1753414213.438:315): avc: denied { write } for pid=6678 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.887104][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'. [ 122.919072][ T2161] usb 1-1: USB disconnect, device number 8 [ 122.987863][ T30] audit: type=1400 audit(1753414213.578:316): avc: denied { watch } for pid=6677 comm="syz.4.190" path="/31/control" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.075517][ T30] audit: type=1400 audit(1753414213.578:317): avc: denied { read } for pid=6677 comm="syz.4.190" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.101638][ T30] audit: type=1400 audit(1753414213.578:318): avc: denied { open } for pid=6677 comm="syz.4.190" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.148563][ T6682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.157091][ T6684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.191'. [ 123.198306][ T6682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.472475][ T6682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.536771][ T6682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.565565][ T6682] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.595650][ T6682] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.627295][ T6682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.640345][ T6682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.659990][ T6682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.773248][ T6682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.786166][ T6682] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.894788][ T6682] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.491218][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.522298][ T6699] block device autoloading is deprecated and will be removed. [ 124.536596][ T6699] syz.0.195: attempt to access beyond end of device [ 124.536596][ T6699] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 124.760768][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 124.767132][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.784898][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 124.873691][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 124.883605][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 124.893387][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 124.902418][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 125.180773][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.240442][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.255235][ T9] usb 4-1: config 0 descriptor?? [ 125.275362][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 125.593538][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.700860][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.781609][ T9] gspca_vc032x: reg_r err -71 [ 125.786388][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 125.790898][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 125.971198][ T9] usb 4-1: USB disconnect, device number 4 [ 127.233522][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.631074][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.831911][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.872256][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 128.187542][ T30] audit: type=1400 audit(1753414218.778:319): avc: denied { write } for pid=6728 comm="syz.1.203" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.344477][ T6738] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 128.358039][ T6738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.365510][ T6738] IPv6: NLM_F_CREATE should be set when creating new route [ 128.379068][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 128.510177][ T6738] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 128.526964][ T6738] netlink: 88 bytes leftover after parsing attributes in process `syz.2.204'. [ 128.597365][ T2161] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.627925][ T6742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.205'. [ 128.751678][ T2161] usb 2-1: device descriptor read/64, error -71 [ 129.383333][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.472088][ T2161] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.616640][ T30] audit: type=1400 audit(1753414220.208:320): avc: denied { write } for pid=6744 comm="syz.4.207" path="socket:[10635]" dev="sockfs" ino=10635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.707470][ T2161] usb 2-1: device descriptor read/64, error -71 [ 129.713876][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.820874][ T30] audit: type=1400 audit(1753414220.338:321): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 129.853670][ T2161] usb usb2-port1: attempt power cycle [ 129.870782][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.890849][ T30] audit: type=1400 audit(1753414220.408:322): avc: denied { setopt } for pid=6744 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.910710][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.950862][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 130.224758][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.209'. [ 130.233723][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 130.242646][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.209'. [ 130.251667][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.209'. [ 130.628783][ T30] audit: type=1400 audit(1753414221.218:323): avc: denied { mount } for pid=6756 comm="syz.0.208" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 130.775774][ T2161] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.069520][ T2161] usb 2-1: device descriptor read/8, error -71 [ 131.080834][ T30] audit: type=1400 audit(1753414221.608:324): avc: denied { read } for pid=6763 comm="syz.4.211" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.184598][ T30] audit: type=1400 audit(1753414221.608:325): avc: denied { open } for pid=6763 comm="syz.4.211" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.504536][ T30] audit: type=1400 audit(1753414221.608:326): avc: denied { ioctl } for pid=6763 comm="syz.4.211" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.564118][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.857973][ T5878] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 131.952686][ T5878] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 132.091592][ T5878] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 132.176172][ T5878] usb 4-1: config 0 has no interface number 0 [ 132.186444][ T5878] usb 4-1: config 0 has no interface number 1 [ 132.248568][ T5878] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 132.290200][ T5878] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.308587][ T5878] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 132.357627][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.364164][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.393235][ T6785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.408064][ T5878] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 132.458852][ T5878] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 132.487063][ T5878] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 132.498983][ T5878] usb 4-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 132.562339][ T5878] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 132.577506][ T5878] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 132.600241][ T30] audit: type=1400 audit(1753414223.188:327): avc: denied { ioctl } for pid=6790 comm="syz.2.219" path="socket:[11446]" dev="sockfs" ino=11446 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.626287][ T5878] usb 4-1: config 0 interface 66 has no altsetting 0 [ 132.638966][ T5878] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 132.649610][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.787348][ T5878] usb 4-1: Product: syz [ 132.877826][ T5878] usb 4-1: Manufacturer: syz [ 132.916870][ T5878] usb 4-1: SerialNumber: syz [ 133.021760][ T5878] usb 4-1: config 0 descriptor?? [ 133.042403][ T5878] usb 4-1: can't set config #0, error -71 [ 133.276700][ T6799] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 133.772347][ T5878] usb 4-1: USB disconnect, device number 5 [ 133.818406][ T6798] block nbd0: server does not support multiple connections per device. [ 133.831235][ T6798] block nbd0: shutting down sockets [ 133.993376][ T30] audit: type=1400 audit(1753414224.578:328): avc: denied { create } for pid=6795 comm="syz.3.221" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.130099][ T6807] binder: 6806:6807 ioctl 400c620e 200000000000 returned -22 [ 134.338473][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 134.347579][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 134.458409][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.468612][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.477619][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.488573][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'. [ 135.108864][ T30] audit: type=1400 audit(1753414224.758:329): avc: denied { unlink } for pid=5836 comm="syz-executor" name="file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.125511][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 135.131404][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.226612][ T6814] FAT-fs (nullb0): bogus number of reserved sectors [ 135.233833][ T6814] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 137.325426][ T30] audit: type=1400 audit(1753414227.918:330): avc: denied { bind } for pid=6840 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.344516][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.502568][ T30] audit: type=1400 audit(1753414227.918:331): avc: denied { write } for pid=6840 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.558721][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.238'. [ 138.567679][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 138.576617][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.238'. [ 139.736003][ T30] audit: type=1400 audit(1753414230.318:332): avc: denied { write } for pid=6868 comm="syz.1.241" path="socket:[10869]" dev="sockfs" ino=10869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.332482][ T6895] __nla_validate_parse: 1 callbacks suppressed [ 141.338768][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.2.246'. [ 141.947533][ T30] audit: type=1400 audit(1753414232.488:333): avc: denied { ioctl } for pid=6898 comm="syz.3.247" path="socket:[11628]" dev="sockfs" ino=11628 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.033823][ T6908] process 'syz.4.249' launched './file0' with NULL argv: empty string added [ 144.055755][ T30] audit: type=1400 audit(1753414234.648:334): avc: denied { execute_no_trans } for pid=6904 comm="syz.4.249" path="/40/file0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.589428][ T6913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.251'. [ 145.592263][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.650770][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.792402][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.843243][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.922468][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.963297][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.056344][ T5891] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 146.066128][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.103810][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.121140][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.129307][ T9] usb 3-1: SerialNumber: syz [ 146.150325][ T5891] usb 5-1: config 0 descriptor?? [ 146.389054][ T9] usb 3-1: 0:2 : does not exist [ 146.439689][ T9] usb 3-1: USB disconnect, device number 5 [ 146.455099][ T30] audit: type=1400 audit(1753414237.048:335): avc: denied { map } for pid=6928 comm="syz.3.256" path="socket:[11688]" dev="sockfs" ino=11688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 147.113137][ T6918] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:19999 [ 147.128568][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 147.183938][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.194635][ T5891] usb 5-1: USB disconnect, device number 3 [ 147.952877][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.186823][ T30] audit: type=1400 audit(1753414238.768:336): avc: denied { ioctl } for pid=6940 comm="syz.0.260" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.259012][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.688676][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.701045][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.717344][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.726746][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.111208][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 149.140518][ T10] usb 3-1: config 0 descriptor?? [ 149.337945][ T30] audit: type=1400 audit(1753414239.928:337): avc: denied { create } for pid=6960 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.396177][ T30] audit: type=1400 audit(1753414239.958:338): avc: denied { getopt } for pid=6960 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.516671][ T30] audit: type=1400 audit(1753414239.958:339): avc: denied { map } for pid=6960 comm="syz.0.267" path="socket:[11814]" dev="sockfs" ino=11814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.539536][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.546719][ T30] audit: type=1400 audit(1753414239.958:340): avc: denied { read } for pid=6960 comm="syz.0.267" path="socket:[11814]" dev="sockfs" ino=11814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.569712][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.446835][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 150.455870][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 150.561290][ T2161] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.599916][ T6982] syz.0.271: attempt to access beyond end of device [ 150.599916][ T6982] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 150.745247][ T2161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.757040][ T2161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.813493][ T2161] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.839234][ T2161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.860412][ T2161] usb 2-1: SerialNumber: syz [ 151.126972][ T2161] usb 2-1: 0:2 : does not exist [ 151.156017][ T10] usb 3-1: string descriptor 0 read error: -71 [ 151.181830][ T10] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 151.209029][ T10] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 151.225407][ T10] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 151.356686][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.526170][ T10] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 151.548314][ T10] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 151.558764][ T2161] usb 2-1: USB disconnect, device number 14 [ 151.620967][ T10] usb 3-1: USB disconnect, device number 6 [ 151.639095][ T6986] udevd[6986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.695687][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.707150][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 151.732767][ T5891] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 151.764752][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.797065][ T5891] usb 4-1: config 0 descriptor?? [ 152.177889][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.192287][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.472629][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.272'. [ 152.489748][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 152.519942][ T30] audit: type=1400 audit(1753414243.108:341): avc: denied { read } for pid=6994 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.520166][ T6985] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 152.766349][ T30] audit: type=1400 audit(1753414243.358:342): avc: denied { append } for pid=7009 comm="syz.4.280" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.814853][ T30] audit: type=1400 audit(1753414243.378:343): avc: denied { connect } for pid=7009 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.848138][ T7003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.856587][ T7003] bond1: (slave bond2): making interface the new active one [ 152.903581][ T7003] bond1: (slave bond2): Enslaving as an active interface with an up link [ 153.941100][ T5940] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.002770][ T5891] Bluetooth: Can't get state to change to load ram patch err [ 154.023714][ T5891] Bluetooth: Loading patch file failed [ 154.029236][ T5891] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 154.080029][ T5891] usb 4-1: USB disconnect, device number 6 [ 154.101416][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 154.111331][ T5940] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.129475][ T5940] usb 2-1: config 0 has no interface number 0 [ 154.155326][ T5940] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.212007][ T5940] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.231619][ T5940] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.248042][ T5940] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.260064][ T5940] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.275531][ T5940] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 154.396556][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.536128][ T5940] usb 2-1: config 0 descriptor?? [ 154.558236][ T5940] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.841507][ T7015] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 155.114699][ T5949] usb 2-1: USB disconnect, device number 15 [ 155.160074][ T5949] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 155.408501][ T917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.678457][ T30] audit: type=1400 audit(1753414246.268:344): avc: denied { append } for pid=7045 comm="syz.4.289" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 155.813943][ T7047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.844199][ T7047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.850375][ T7047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.864817][ T7047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.905741][ T917] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 155.920653][ T30] audit: type=1400 audit(1753414246.508:345): avc: denied { create } for pid=7062 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.922861][ T917] usb 4-1: config 1 interface 0 has no altsetting 0 [ 155.959707][ T917] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.40 [ 155.970256][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.978534][ T917] usb 4-1: Product: Т [ 155.986298][ T917] usb 4-1: Manufacturer: ᰁ [ 155.993945][ T917] usb 4-1: SerialNumber: ᰉ [ 156.000259][ T30] audit: type=1400 audit(1753414246.578:346): avc: denied { read } for pid=7062 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.145621][ T917] usbhid 4-1:1.0: can't add hid device: -71 [ 157.295458][ T917] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 157.872223][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 157.872483][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.880022][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.884342][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.903765][ T917] usb 4-1: USB disconnect, device number 7 [ 158.908166][ T7085] binder: 7084:7085 ioctl 4018620d 0 returned -22 [ 158.955266][ T7089] evm: overlay not supported [ 159.653573][ T5949] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.672769][ T30] audit: type=1400 audit(1753414250.268:347): avc: denied { getopt } for pid=7092 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.677126][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 159.720933][ T2161] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.821196][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 159.849966][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.080738][ T2161] usb 2-1: Using ep0 maxpacket: 8 [ 160.088807][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.099309][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.109844][ T2161] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 160.178631][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.195361][ T2161] usb 2-1: can't read configurations, error -61 [ 160.203442][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.234630][ T5949] usb 3-1: config 0 descriptor?? [ 160.693720][ T5949] hub 3-1:0.0: USB hub found [ 160.716168][ T5949] hub 3-1:0.0: 1 port detected [ 160.749457][ T2161] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 160.763157][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 160.796933][ T7113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.304'. [ 160.864485][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 160.911193][ T2161] usb 2-1: Using ep0 maxpacket: 8 [ 160.916640][ T10] usb 4-1: config 0 has no interface number 0 [ 160.953043][ T2161] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 160.959540][ T7089] netlink: 68 bytes leftover after parsing attributes in process `syz.2.298'. [ 160.962941][ T2161] usb 2-1: can't read configurations, error -61 [ 160.969726][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.976748][ T2161] usb usb2-port1: attempt power cycle [ 161.035860][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.088175][ T7089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.095652][ T7089] IPv6: NLM_F_CREATE should be set when creating new route [ 161.098945][ T30] audit: type=1400 audit(1753414251.688:348): avc: denied { mounton } for pid=7112 comm="syz.4.305" path="/proc/194/task" dev="proc" ino=12384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 161.102894][ T7089] IPv6: NLM_F_CREATE should be set when creating new route [ 161.103559][ T7089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.217533][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.222699][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.305'. [ 161.276289][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 161.306494][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.336727][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.346181][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.356573][ T10] usb 4-1: config 0 descriptor?? [ 161.388948][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 161.490585][ T2161] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 161.521434][ T2161] usb 2-1: Using ep0 maxpacket: 8 [ 161.529131][ T2161] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 161.537503][ T2161] usb 2-1: can't read configurations, error -61 [ 161.575387][ T7102] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 161.881487][ T10] usb 3-1: USB disconnect, device number 7 [ 162.048272][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.059149][ T5959] usb 4-1: USB disconnect, device number 8 [ 162.086827][ T5959] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 162.261005][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 162.309238][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 162.369694][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 162.495672][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 162.526182][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 162.586853][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 162.654750][ T5940] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 162.944261][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.955813][ T5940] usb 5-1: Product: syz [ 162.960012][ T5940] usb 5-1: Manufacturer: syz [ 162.982843][ T5940] usb 5-1: SerialNumber: syz [ 163.208733][ T5940] usb 5-1: config 0 descriptor?? [ 163.384274][ T7139] trusted_key: encrypted_key: insufficient parameters specified [ 165.125377][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.309708][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.453103][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.481645][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.539069][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.624073][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 165.867354][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.151599][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.169434][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.192780][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.219278][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.451201][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.459451][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.467328][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.474155][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.623488][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 166.770413][ T7190] tls_set_device_offload: netdev not found [ 167.228691][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 167.361138][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 167.401672][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 167.423352][ T5940] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 167.432854][ T7200] binder: 7197:7200 ioctl 4018620d 0 returned -22 [ 167.449537][ T5940] input input6: Timeout waiting for response from device. [ 167.502510][ T5940] usb 5-1: USB disconnect, device number 4 [ 167.700557][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 167.733735][ T7208] trusted_key: encrypted_key: insufficient parameters specified [ 167.844882][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 167.853840][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 167.862782][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 167.871814][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.329'. [ 168.227809][ T30] audit: type=1400 audit(1753414258.818:349): avc: denied { setopt } for pid=7210 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.300901][ T30] audit: type=1400 audit(1753414258.898:350): avc: denied { ioctl } for pid=7210 comm="syz.4.332" path="socket:[12592]" dev="sockfs" ino=12592 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.994191][ T7223] syz.4.334 (7223): /proc/7221/oom_adj is deprecated, please use /proc/7221/oom_score_adj instead. [ 169.029176][ T30] audit: type=1400 audit(1753414259.618:351): avc: denied { setattr } for pid=7219 comm="syz.3.335" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.071993][ T30] audit: type=1400 audit(1753414259.618:352): avc: denied { write } for pid=7219 comm="syz.3.335" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.107503][ T30] audit: type=1400 audit(1753414259.618:353): avc: denied { open } for pid=7219 comm="syz.3.335" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.008192][ T7250] kAFS: No cell specified [ 170.166332][ T7243] binder: BINDER_SET_CONTEXT_MGR already set [ 170.248403][ T7243] binder: 7241:7243 ioctl 4018620d 200000000040 returned -16 [ 170.293869][ T30] audit: type=1400 audit(1753414260.888:354): avc: denied { append } for pid=7257 comm="syz.0.346" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.923548][ T30] audit: type=1400 audit(1753414261.208:355): avc: denied { getopt } for pid=7257 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.379113][ T30] audit: type=1400 audit(1753414261.968:356): avc: denied { shutdown } for pid=7272 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.423707][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 172.323957][ T30] audit: type=1400 audit(1753414262.778:357): avc: denied { connect } for pid=7281 comm="syz.1.354" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.768577][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.775903][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.794102][ T7292] bridge0: entered allmulticast mode [ 172.932923][ T7299] binder: BINDER_SET_CONTEXT_MGR already set [ 172.941521][ T7292] bridge_slave_1: left allmulticast mode [ 172.947158][ T7292] bridge_slave_1: left promiscuous mode [ 172.950415][ T7299] binder: 7297:7299 ioctl 4018620d 200000000040 returned -16 [ 173.598452][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.614825][ T7292] bridge_slave_0: left allmulticast mode [ 173.621407][ T7292] bridge_slave_0: left promiscuous mode [ 173.641827][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.167144][ T7300] geneve2: entered allmulticast mode [ 175.014377][ T7319] ip6tnl1: entered allmulticast mode [ 175.188527][ T30] audit: type=1400 audit(1753414265.778:358): avc: denied { read } for pid=7324 comm="syz.0.365" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 176.178074][ T7339] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 176.240744][ T5878] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.496835][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.507852][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.518025][ T5878] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.527165][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.537105][ T5878] usb 5-1: config 0 descriptor?? [ 176.620069][ T7350] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.171529][ T5878] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 178.192761][ T5878] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 178.215329][ T5878] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 178.242497][ T5878] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 178.252148][ T5878] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 178.271278][ T5878] usb 5-1: USB disconnect, device number 5 [ 178.582173][ T7364] rdma_op ffff88805424f9f0 conn xmit_rdma 0000000000000000 [ 179.104567][ T30] audit: type=1400 audit(1753414269.698:359): avc: denied { mount } for pid=7365 comm="syz.1.374" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 179.191788][ T30] audit: type=1400 audit(1753414269.698:360): avc: denied { read write } for pid=7367 comm="syz.4.375" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 179.296494][ T30] audit: type=1400 audit(1753414269.698:361): avc: denied { open } for pid=7367 comm="syz.4.375" path="/64/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.676773][ T30] audit: type=1400 audit(1753414271.268:362): avc: denied { remount } for pid=7376 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.952361][ T30] audit: type=1400 audit(1753414271.488:363): avc: denied { read } for pid=7389 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.952413][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 181.964183][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 182.110862][ T917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 182.280987][ T917] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 182.289120][ T917] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 182.317686][ T917] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 182.328115][ T917] usb 2-1: config 0 has no interface number 0 [ 182.334465][ T917] usb 2-1: config 0 has no interface number 1 [ 182.340590][ T917] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 182.378287][ T917] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 182.535177][ T917] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 182.546820][ T917] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 182.556970][ T917] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 182.569070][ T917] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 182.580849][ T917] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 182.592332][ T917] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 182.602927][ T917] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 182.617277][ T917] usb 2-1: config 0 interface 66 has no altsetting 0 [ 182.632696][ T917] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 182.642442][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.650470][ T917] usb 2-1: Product: syz [ 182.656607][ T917] usb 2-1: Manufacturer: syz [ 182.662094][ T917] usb 2-1: SerialNumber: syz [ 182.688728][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.389'. [ 182.697691][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 182.706609][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.389'. [ 182.715625][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.389'. [ 182.867155][ T917] usb 2-1: config 0 descriptor?? [ 182.960919][ T917] ljca 2-1:0.84: bulk endpoints not found [ 183.019709][ T30] audit: type=1400 audit(1753414273.608:364): avc: denied { ioctl } for pid=7417 comm="syz.3.390" path="socket:[12925]" dev="sockfs" ino=12925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.044879][ T30] audit: type=1400 audit(1753414273.618:365): avc: denied { bind } for pid=7417 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.162877][ T917] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 183.177757][ T917] usb 2-1: USB disconnect, device number 20 [ 184.438279][ T7433] syz.4.395: attempt to access beyond end of device [ 184.438279][ T7433] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 184.480008][ T7433] EXT4-fs (nbd4): unable to read superblock [ 187.152170][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.401'. [ 187.152215][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'. [ 187.152232][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.401'. [ 187.152261][ T7465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.401'. [ 188.150739][ T2161] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.977555][ T2161] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.006667][ T2161] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 189.192794][ T2161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.430123][ T7485] x_tables: duplicate underflow at hook 3 [ 189.485231][ T2161] usb 3-1: config 0 descriptor?? [ 189.548442][ T7485] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.593922][ T917] IPVS: starting estimator thread 0... [ 189.722517][ T7487] IPVS: using max 74 ests per chain, 177600 per kthread [ 189.762418][ T2161] usb 3-1: USB disconnect, device number 8 [ 189.826234][ T30] audit: type=1400 audit(1753414280.418:366): avc: denied { bind } for pid=7489 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.880759][ T917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.083595][ T7493] Invalid logical block size (768) [ 190.084566][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.118614][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.135631][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.147799][ T917] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.179393][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.235241][ T917] usb 5-1: config 0 descriptor?? [ 191.049000][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.413'. [ 191.058003][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 191.066959][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.413'. [ 191.076365][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.413'. [ 191.986838][ T917] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 192.428249][ T917] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 192.463282][ T917] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 192.475700][ T917] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 192.548234][ T917] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 192.565796][ T917] usb 5-1: USB disconnect, device number 6 [ 192.969557][ T5940] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 193.117163][ T7554] geneve2: entered promiscuous mode [ 193.122508][ T7554] geneve2: entered allmulticast mode [ 193.276629][ T5940] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 193.412558][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.524528][ T5940] usb 3-1: config 0 descriptor?? [ 193.542951][ T5940] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 193.548975][ T7557] 9pnet_fd: Insufficient options for proto=fd [ 193.627955][ T30] audit: type=1400 audit(1753414284.218:367): avc: denied { read } for pid=7556 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.799487][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.805926][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.949852][ T5940] gp8psk: usb in 128 operation failed. [ 193.956645][ T5940] gp8psk: usb in 137 operation failed. [ 193.962367][ T5940] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 194.175600][ T5940] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 194.293805][ T30] audit: type=1400 audit(1753414284.878:368): avc: denied { connect } for pid=7537 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 195.146718][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.155808][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.164751][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.173809][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.499026][ T7581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.835043][ T5940] usb 3-1: USB disconnect, device number 9 [ 196.398268][ T7602] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.501988][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 196.851603][ T7616] sp0: Synchronizing with TNC [ 196.863609][ T30] audit: type=1400 audit(1753414287.458:369): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.885082][ T30] audit: type=1400 audit(1753414287.458:370): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.801737][ T7621] syz.0.441: attempt to access beyond end of device [ 197.801737][ T7621] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 197.847052][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 197.855901][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 197.993415][ T30] audit: type=1400 audit(1753414287.458:371): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.020631][ T7611] [U] [ 198.033682][ T30] audit: type=1400 audit(1753414287.458:372): avc: denied { read } for pid=5497 comm="dhcpcd" name="n100" dev="tmpfs" ino=3595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.060617][ T30] audit: type=1400 audit(1753414287.458:373): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.092603][ T30] audit: type=1400 audit(1753414287.458:374): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.115799][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.344368][ T7644] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.445'. [ 198.354590][ T7644] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.445'. [ 198.763385][ T7657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.450'. [ 199.187306][ T30] audit: type=1400 audit(1753414289.778:375): avc: denied { read } for pid=7663 comm="syz.1.452" path="socket:[14435]" dev="sockfs" ino=14435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.920358][ T7689] openvswitch: netlink: Message has 4 unknown bytes. [ 200.797784][ T30] audit: type=1326 audit(1753414291.378:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226cf8e9a9 code=0x7fc00000 [ 200.894147][ T30] audit: type=1326 audit(1753414291.378:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f226cf8e9a9 code=0x7fc00000 [ 200.917498][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.953749][ T30] audit: type=1326 audit(1753414291.378:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226cf8e9a9 code=0x7fc00000 [ 200.983416][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.445046][ T7724] overlayfs: missing 'lowerdir' [ 202.973986][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 202.974001][ T30] audit: type=1400 audit(1753414293.568:384): avc: denied { watch watch_reads } for pid=7730 comm="syz.0.470" path="pipe:[3709]" dev="pipefs" ino=3709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 203.032764][ T7736] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 203.057006][ T30] audit: type=1400 audit(1753414293.598:385): avc: denied { remove_name } for pid=7734 comm="syz.2.469" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.126567][ T30] audit: type=1400 audit(1753414293.598:386): avc: denied { unlink } for pid=7734 comm="syz.2.469" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.153925][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 203.583891][ T7749] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.572555][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.477'. [ 204.581511][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 204.590376][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.477'. [ 204.599587][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.477'. [ 206.027046][ T7778] overlayfs: missing 'lowerdir' [ 206.577806][ T7787] binder: 7783:7787 ioctl 4018620d 0 returned -22 [ 206.649520][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.657101][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.664779][ T7787] bridge0: entered allmulticast mode [ 206.674575][ T7787] bridge_slave_1: left allmulticast mode [ 206.813476][ T7787] bridge_slave_1: left promiscuous mode [ 206.836870][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.077591][ T7787] bridge_slave_0: left allmulticast mode [ 207.103701][ T7787] bridge_slave_0: left promiscuous mode [ 207.134169][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.370540][ T30] audit: type=1400 audit(1753414297.958:387): avc: denied { ioctl } for pid=7800 comm="syz.2.484" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.538188][ T30] audit: type=1400 audit(1753414298.108:388): avc: denied { ioctl } for pid=7800 comm="syz.2.484" path="socket:[15394]" dev="sockfs" ino=15394 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.280842][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 208.554818][ T5878] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 208.568930][ T5878] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.586926][ T5878] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.613373][ T5878] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.634638][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.751270][ T5878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.767229][ T5878] usb 3-1: invalid MIDI out EP 0 [ 208.979688][ T5878] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 209.005250][ T5878] usb 3-1: USB disconnect, device number 10 [ 210.223432][ T30] audit: type=1400 audit(1753414300.818:389): avc: denied { watch } for pid=7819 comm="syz.3.490" path="/111/file1" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.246587][ T30] audit: type=1400 audit(1753414300.818:390): avc: denied { watch_sb watch_reads } for pid=7819 comm="syz.3.490" path="/111/file1" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.306376][ T7822] xt_ecn: cannot match TCP bits for non-tcp packets [ 210.347863][ T7824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=7824 comm=syz.3.492 [ 210.902635][ T7832] netlink: 52 bytes leftover after parsing attributes in process `syz.2.495'. [ 211.340813][ T5891] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.370483][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 211.379599][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 212.043555][ T5891] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 212.333781][ T5891] usb 3-1: config 0 has no interface number 0 [ 212.357992][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 212.367193][ T5891] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 212.380748][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 212.390604][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.402463][ T5891] usb 3-1: config 0 descriptor?? [ 212.407926][ T7832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.476245][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.606080][ T30] audit: type=1400 audit(1753414303.198:391): avc: denied { checkpoint_restore } for pid=7846 comm="syz.0.502" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.797550][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 213.788526][ T30] audit: type=1400 audit(1753414304.378:392): avc: denied { create } for pid=7830 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.160964][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 214.211980][ T7869] overlayfs: failed to clone upperpath [ 214.523267][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 214.686786][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.700492][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.736599][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.746776][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.754884][ T5878] usb 2-1: Product: syz [ 214.759124][ T5878] usb 2-1: Manufacturer: syz [ 214.763879][ T5878] usb 2-1: SerialNumber: syz [ 214.773340][ T5878] usb 2-1: config 0 descriptor?? [ 214.780419][ T5878] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.790601][ T5878] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 214.877052][ T917] usb 3-1: USB disconnect, device number 11 [ 215.101755][ T5878] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 215.145167][ T5878] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 215.216556][ T5878] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 215.230566][ T5878] em28xx 2-1:0.0: No AC97 audio processor [ 215.367634][ T5878] usb 2-1: USB disconnect, device number 21 [ 215.480691][ T5878] em28xx 2-1:0.0: Disconnecting em28xx [ 215.632111][ T5878] em28xx 2-1:0.0: Freeing device [ 215.716538][ T7888] rdma_op ffff888057f5a9f0 conn xmit_rdma 0000000000000000 [ 216.426171][ T7898] FAULT_INJECTION: forcing a failure. [ 216.426171][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 216.620988][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.1.512 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 216.621020][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.621031][ T7898] Call Trace: [ 216.621037][ T7898] [ 216.621045][ T7898] dump_stack_lvl+0x16c/0x1f0 [ 216.621070][ T7898] should_fail_ex+0x512/0x640 [ 216.621097][ T7898] ? fs_reclaim_acquire+0xae/0x150 [ 216.621120][ T7898] ? tomoyo_encode2+0x100/0x3e0 [ 216.621136][ T7898] should_failslab+0xc2/0x120 [ 216.621153][ T7898] __kmalloc_noprof+0xd2/0x510 [ 216.621187][ T7898] tomoyo_encode2+0x100/0x3e0 [ 216.621207][ T7898] tomoyo_encode+0x29/0x50 [ 216.621223][ T7898] tomoyo_realpath_from_path+0x18f/0x6e0 [ 216.621244][ T7898] ? tomoyo_profile+0x47/0x60 [ 216.621267][ T7898] tomoyo_path_number_perm+0x245/0x580 [ 216.621291][ T7898] ? tomoyo_path_number_perm+0x237/0x580 [ 216.621319][ T7898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.621345][ T7898] ? find_held_lock+0x2b/0x80 [ 216.621392][ T7898] ? find_held_lock+0x2b/0x80 [ 216.621413][ T7898] ? hook_file_ioctl_common+0x145/0x410 [ 216.621440][ T7898] ? __fget_files+0x20e/0x3c0 [ 216.621462][ T7898] security_file_ioctl+0x9b/0x240 [ 216.621481][ T7898] __x64_sys_ioctl+0xb7/0x210 [ 216.621507][ T7898] do_syscall_64+0xcd/0x4c0 [ 216.621527][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.621544][ T7898] RIP: 0033:0x7f226cf8e9a9 [ 216.621559][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.621576][ T7898] RSP: 002b:00007f226ddea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.621595][ T7898] RAX: ffffffffffffffda RBX: 00007f226d1b6080 RCX: 00007f226cf8e9a9 [ 216.621606][ T7898] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000005 [ 216.621617][ T7898] RBP: 00007f226ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 216.621636][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.621646][ T7898] R13: 0000000000000000 R14: 00007f226d1b6080 R15: 00007fff180ba688 [ 216.621671][ T7898] [ 216.850752][ T7898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.875349][ T7904] netlink: 52 bytes leftover after parsing attributes in process `syz.0.514'. [ 217.191470][ T7906] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 217.243973][ T7906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.540454][ T7919] overlayfs: missing 'workdir' [ 218.845992][ T7906] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 218.875302][ T7907] vlan2: entered allmulticast mode [ 218.898077][ T7907] veth1: entered allmulticast mode [ 218.911907][ T7907] veth1: entered promiscuous mode [ 218.924194][ T7907] veth1: left promiscuous mode [ 218.938523][ T7907] bond1: (slave vlan2): making interface the new active one [ 218.948372][ T7907] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 219.025180][ T7907] veth1: entered promiscuous mode [ 219.038903][ T7907] vlan2: entered promiscuous mode [ 219.048575][ T7907] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 219.971542][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 220.830176][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 220.839166][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 221.473977][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.563827][ T7975] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.421477][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.474361][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.648868][ T5940] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 222.898938][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.911606][ T5940] usb 5-1: config 0 descriptor?? [ 222.964766][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 223.062007][ T30] audit: type=1400 audit(1753414313.638:393): avc: denied { append } for pid=7986 comm="syz.2.538" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.191597][ T7996] binder: BINDER_SET_CONTEXT_MGR already set [ 223.260513][ T7996] binder: 7995:7996 ioctl 4018620d 200000000040 returned -16 [ 223.268922][ T7996] binder: 7995:7996 ioctl c0306201 0 returned -14 [ 223.367899][ T8003] ref_ctr_offset mismatch. inode: 0x278 offset: 0x0 ref_ctr_offset(old): 0x200000000180 ref_ctr_offset(new): 0x0 [ 224.852954][ T5940] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 224.864716][ T5940] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 224.880752][ T5940] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 225.246922][ T5940] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 225.255136][ T5940] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 225.273503][ T5940] usb 5-1: USB disconnect, device number 7 [ 225.948815][ T8036] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 226.044120][ T8036] team0: Device hsr_slave_0 failed to register rx_handler [ 226.768190][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 226.812591][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 226.821952][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 226.831638][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 226.847728][ T8049] rdma_op ffff8880318999f0 conn xmit_rdma 0000000000000000 [ 227.362507][ T30] audit: type=1400 audit(1753414317.958:394): avc: denied { connect } for pid=8056 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 228.658700][ T917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 228.911022][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 228.920040][ T917] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 228.943707][ T8081] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 228.950834][ T917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.970930][ T917] usb 3-1: config 0 has no interface number 0 [ 228.973156][ T8081] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 228.996140][ T8081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.001761][ T917] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 229.111814][ T8084] netlink: 52 bytes leftover after parsing attributes in process `syz.4.564'. [ 229.130106][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.141922][ T917] usb 3-1: Product: syz [ 229.162246][ T917] usb 3-1: Manufacturer: syz [ 229.167028][ T917] usb 3-1: SerialNumber: syz [ 229.370774][ T917] usb 3-1: config 0 descriptor?? [ 229.381505][ T917] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 229.387863][ T917] usb 3-1: No valid video chain found. [ 229.520819][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.656055][ T5891] usb 3-1: USB disconnect, device number 12 [ 229.693613][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 229.730707][ T10] usb 5-1: config 0 has no interface number 0 [ 229.750090][ T10] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 229.780345][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 229.817290][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 229.826785][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.847029][ T10] usb 5-1: config 0 descriptor?? [ 229.872572][ T8084] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 229.936130][ T7059] udevd[7059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.480885][ T5940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.680213][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.693684][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.703822][ T5940] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 230.713488][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.724635][ T5940] usb 3-1: config 0 descriptor?? [ 231.154092][ T5940] hid-led 0003:1D34:0004.0008: unknown main item tag 0x0 [ 231.368535][ T5940] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -71 [ 231.896030][ T5940] usb 3-1: USB disconnect, device number 13 [ 231.994519][ T5838] usb 5-1: USB disconnect, device number 8 [ 232.107757][ T8142] netlink: 200 bytes leftover after parsing attributes in process `syz.0.581'. [ 232.119796][ T8142] raw_sendmsg: syz.0.581 forgot to set AF_INET. Fix it! [ 232.515704][ T30] audit: type=1400 audit(1753414323.098:395): avc: denied { read open } for pid=8149 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.584956][ T30] audit: type=1400 audit(1753414323.108:396): avc: denied { getattr } for pid=8149 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.648782][ T30] audit: type=1400 audit(1753414323.238:397): avc: denied { accept } for pid=8154 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.065352][ T30] audit: type=1400 audit(1753414323.648:398): avc: denied { add_name } for pid=8146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.266597][ T30] audit: type=1400 audit(1753414323.658:399): avc: denied { create } for pid=8146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.290342][ T30] audit: type=1400 audit(1753414323.658:400): avc: denied { write } for pid=8146 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.349099][ T30] audit: type=1400 audit(1753414323.658:401): avc: denied { append } for pid=8146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.925753][ T30] audit: type=1400 audit(1753414323.858:402): avc: denied { remove_name } for pid=8182 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.029851][ T30] audit: type=1400 audit(1753414323.858:403): avc: denied { unlink } for pid=8182 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.373970][ T30] audit: type=1400 audit(1753414324.938:404): avc: denied { lock } for pid=8200 comm="syz.4.596" path="socket:[16013]" dev="sockfs" ino=16013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 236.351502][ T8239] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'. [ 236.720983][ T917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.841384][ T13] vlan2: left promiscuous mode [ 236.887183][ T917] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 236.905848][ T917] usb 3-1: config 0 has no interface number 0 [ 236.921789][ T917] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 236.932613][ T917] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 236.948068][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.971298][ T917] usb 3-1: config 0 descriptor?? [ 237.060966][ T8239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.181158][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.209975][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 237.219069][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 237.444314][ T10] usb 2-1: device descriptor read/64, error -71 [ 237.568356][ T8259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.577680][ T8259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.750847][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 238.090753][ T10] usb 2-1: device descriptor read/64, error -71 [ 238.160489][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 238.160505][ T30] audit: type=1400 audit(1753414328.748:406): avc: denied { write } for pid=8263 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.199863][ T30] audit: type=1400 audit(1753414328.778:407): avc: denied { name_bind } for pid=8263 comm="syz.3.611" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 238.232755][ T10] usb usb2-port1: attempt power cycle [ 238.406921][ T8275] netlink: 'syz.3.612': attribute type 9 has an invalid length. [ 238.421284][ T8275] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.612'. [ 238.809124][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.833925][ T10] usb 2-1: device descriptor read/8, error -71 [ 239.132160][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 239.243894][ T10] usb 2-1: device descriptor read/8, error -71 [ 239.271699][ T5838] usb 3-1: USB disconnect, device number 14 [ 239.434928][ T10] usb usb2-port1: unable to enumerate USB device [ 240.022360][ T8299] libceph: resolve '. [ 240.022360][ T8299] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 240.022360][ T8299] ' (ret=-3): failed [ 240.116807][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 240.125663][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 240.438923][ T8306] netlink: 'syz.3.623': attribute type 21 has an invalid length. [ 240.446929][ T8306] netlink: 'syz.3.623': attribute type 6 has an invalid length. [ 240.454628][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.623'. [ 241.090037][ T8317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.099535][ T8317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.060707][ T5838] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 242.228944][ T5838] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.279919][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.296602][ T5838] usb 3-1: config 0 descriptor?? [ 243.663693][ T8332] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 243.675418][ T8332] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 243.690117][ T5838] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 243.777704][ T8353] netlink: 52 bytes leftover after parsing attributes in process `syz.0.637'. [ 243.802713][ T5838] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 243.956145][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 244.031140][ T5838] asix 3-1:0.0: probe with driver asix failed with error -71 [ 244.055477][ T5838] usb 3-1: USB disconnect, device number 15 [ 244.107120][ T30] audit: type=1400 audit(1753414334.688:408): avc: denied { accept } for pid=8354 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.129478][ T8375] hugetlbfs: syz.1.643 (8375): Using mlock ulimits for SHM_HUGETLB is obsolete [ 245.320847][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 245.405472][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.561282][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 245.569799][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 245.580183][ T9] usb 3-1: config 0 has no interface number 0 [ 245.587031][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.600407][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 245.613744][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.622745][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.632894][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.645481][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.659226][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 245.668364][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 245.676408][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.688513][ T10] usb 5-1: Manufacturer: syz [ 245.693328][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.703384][ T10] usb 5-1: config 0 descriptor?? [ 245.716576][ T10] igorplugusb 5-1:0.0: incorrect number of endpoints [ 245.726887][ T9] usb 3-1: config 0 descriptor?? [ 245.751081][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 245.914889][ T9] usb 5-1: USB disconnect, device number 9 [ 245.954889][ T8370] netlink: 100 bytes leftover after parsing attributes in process `syz.2.641'. [ 246.426653][ T5940] usb 3-1: USB disconnect, device number 16 [ 246.434038][ T5940] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 249.522877][ T8426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.658'. [ 250.020727][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 250.246414][ T8434] overlayfs: failed to clone upperpath [ 250.800810][ T30] audit: type=1400 audit(1753414341.348:409): avc: denied { bind } for pid=8431 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.082133][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.093415][ T9] usb 2-1: config 0 has no interface number 0 [ 251.106225][ T9] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 251.116410][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 251.136583][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.171503][ T9] usb 2-1: config 0 descriptor?? [ 251.183969][ T8427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.339176][ T8432] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 251.821761][ T30] audit: type=1400 audit(1753414342.418:410): avc: denied { name_bind } for pid=8446 comm="syz.3.666" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 253.270753][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 253.307463][ T917] usb 2-1: USB disconnect, device number 26 [ 253.519510][ T9] usb 5-1: device descriptor read/64, error -71 [ 254.426563][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.587009][ T9] usb 5-1: device descriptor read/64, error -71 [ 255.055873][ T8489] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 255.067067][ T8489] netlink: 17 bytes leftover after parsing attributes in process `syz.2.676'. [ 255.341352][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.359871][ T8491] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.370938][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720867][ T9] usb usb5-port1: attempt power cycle [ 256.127702][ T8506] binder: Unknown parameter 'uid' [ 256.130808][ T30] audit: type=1400 audit(1753414346.698:411): avc: denied { remount } for pid=8501 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 256.348851][ T8510] netlink: 'syz.0.682': attribute type 12 has an invalid length. [ 257.257484][ T30] audit: type=1400 audit(1753414347.798:412): avc: denied { module_request } for pid=8511 comm="syz.1.683" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.623070][ T8507] ALSA: mixer_oss: invalid OSS volume '' [ 258.306123][ T30] audit: type=1400 audit(1753414348.898:413): avc: denied { create } for pid=8531 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 258.707768][ T8544] netlink: 1 bytes leftover after parsing attributes in process `syz.0.690'. [ 259.217765][ T30] audit: type=1400 audit(1753414349.388:414): avc: denied { kexec_image_load } for pid=8541 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 259.725008][ T30] audit: type=1400 audit(1753414350.318:415): avc: denied { accept } for pid=8531 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.060016][ T30] audit: type=1400 audit(1753414350.648:416): avc: denied { create } for pid=8551 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.315402][ T30] audit: type=1400 audit(1753414350.908:417): avc: denied { ioctl } for pid=8555 comm="syz.0.694" path="socket:[17190]" dev="sockfs" ino=17190 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.440981][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 260.466922][ T8557] could not allocate digest TFM handle rmd256-generic [ 260.489496][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 260.504200][ T8564] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.696'. [ 260.517803][ T30] audit: type=1400 audit(1753414351.098:418): avc: denied { bind } for pid=8563 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.600699][ T9] usb 2-1: device descriptor read/64, error -71 [ 260.840774][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 260.970842][ T9] usb 2-1: device descriptor read/64, error -71 [ 261.030051][ T30] audit: type=1400 audit(1753414351.618:419): avc: denied { connect } for pid=8572 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.082035][ T9] usb usb2-port1: attempt power cycle [ 261.420782][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 261.924617][ T9] usb 2-1: device descriptor read/8, error -71 [ 262.180775][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 262.201906][ T9] usb 2-1: device descriptor read/8, error -71 [ 262.317356][ T9] usb usb2-port1: unable to enumerate USB device [ 262.321142][ T5940] IPVS: starting estimator thread 0... [ 262.421021][ T8581] IPVS: using max 41 ests per chain, 98400 per kthread [ 262.800891][ T5959] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.050765][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 263.062402][ T5959] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 263.070860][ T5959] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.079085][ T5959] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.100916][ T5959] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.109197][ T5959] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.129548][ T5959] usb 5-1: config 0 has no interface number 0 [ 263.155659][ T5959] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 263.180695][ T5959] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 263.202224][ T5959] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.217195][ T5959] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.328665][ T5959] usb 5-1: config 0 interface 125 has no altsetting 0 [ 263.335595][ T5959] usb 5-1: config 0 interface 125 has no altsetting 2 [ 263.345200][ T5959] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 263.360717][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.370443][ T5959] usb 5-1: Product: syz [ 263.376129][ T5959] usb 5-1: Manufacturer: syz [ 263.960309][ T5959] usb 5-1: SerialNumber: syz [ 264.128748][ T5959] usb 5-1: config 0 descriptor?? [ 264.176796][ T5959] usb 5-1: selecting invalid altsetting 2 [ 265.420739][ T5959] usb 5-1: USB disconnect, device number 13 [ 265.453938][ T30] audit: type=1400 audit(1753414356.048:420): avc: denied { map } for pid=8607 comm="syz.0.710" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 265.488168][ T8612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.710'. [ 265.520802][ T30] audit: type=1400 audit(1753414356.108:421): avc: denied { ioctl } for pid=8607 comm="syz.0.710" path="socket:[17326]" dev="sockfs" ino=17326 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 265.548409][ T30] audit: type=1400 audit(1753414356.108:422): avc: denied { accept } for pid=8607 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 265.689288][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 266.772892][ T8619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.975110][ T8635] Illegal XDP return value 4294967294 on prog (id 111) dev N/A, expect packet loss! [ 267.000424][ T30] audit: type=1326 audit(1753414357.588:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8624 comm="syz.1.715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f226cf8e9a9 code=0x0 [ 267.432308][ T8619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.616860][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 267.671037][ T5959] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.685342][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 267.694481][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 267.703940][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 267.736137][ T8619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.929473][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.986127][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.032894][ T5959] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.096845][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.121976][ T8619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.143748][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 268.196279][ T5959] usb 5-1: config 0 descriptor?? [ 268.201766][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 268.245571][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 268.515032][ T30] audit: type=1400 audit(1753414359.078:424): avc: denied { mount } for pid=8656 comm="syz.1.723" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 268.823181][ T8619] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.832101][ T30] audit: type=1400 audit(1753414359.078:425): avc: denied { read } for pid=8656 comm="syz.1.723" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 268.908237][ T30] audit: type=1400 audit(1753414359.078:426): avc: denied { open } for pid=8656 comm="syz.1.723" path="/147/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 268.948783][ T8619] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.010760][ T30] audit: type=1400 audit(1753414359.098:427): avc: denied { mounton } for pid=8656 comm="syz.1.723" path="/147/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 269.055499][ T8619] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.243545][ T5959] usb 5-1: string descriptor 0 read error: -22 [ 269.258764][ T8619] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.777539][ T30] audit: type=1400 audit(1753414359.578:428): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 269.815125][ T5959] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input7 [ 270.020755][ T8668] openvswitch: netlink: Flow key attribute not present in set flow. [ 270.256504][ T8675] kAFS: No cell specified [ 270.309372][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 270.667819][ T5959] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 270.674257][ T8675] syz.0.727: attempt to access beyond end of device [ 270.674257][ T8675] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 270.693596][ T8675] XFS (nbd0): SB validate failed with error -5. [ 270.782121][ T5959] usb 5-1: USB disconnect, device number 14 [ 270.939026][ T8682] fido_id[8682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 271.812826][ T8693] block device autoloading is deprecated and will be removed. [ 272.740775][ T5959] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 273.112889][ T5959] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 273.121702][ T5959] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 273.133631][ T5959] usb 5-1: config 220 has no interface number 2 [ 273.140095][ T5959] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 273.342385][ T5959] usb 5-1: config 220 interface 0 has no altsetting 0 [ 273.356892][ T5959] usb 5-1: config 220 interface 76 has no altsetting 0 [ 273.377735][ T30] audit: type=1400 audit(1753414363.918:429): avc: denied { load_policy } for pid=8697 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.452478][ T5959] usb 5-1: config 220 interface 1 has no altsetting 0 [ 273.631852][ T5959] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 273.656641][ T8712] netlink: zone id is out of range [ 273.718357][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.776837][ T8712] netlink: zone id is out of range [ 273.794269][ T5959] usb 5-1: Product: syz [ 273.804781][ T5838] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 273.818594][ T8712] netlink: zone id is out of range [ 273.832056][ T5959] usb 5-1: Manufacturer: syz [ 273.853269][ T8712] netlink: zone id is out of range [ 273.858540][ T5959] usb 5-1: SerialNumber: syz [ 273.883230][ T8712] netlink: zone id is out of range [ 273.904853][ T8712] netlink: zone id is out of range [ 273.925044][ T8712] netlink: zone id is out of range [ 273.970773][ T8712] netlink: zone id is out of range [ 273.997738][ T8712] netlink: zone id is out of range [ 274.060510][ T30] audit: type=1400 audit(1753414364.648:430): avc: denied { read } for pid=8713 comm="syz.0.739" path="socket:[17958]" dev="sockfs" ino=17958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.094247][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.112656][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.120863][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.125666][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.163708][ T8702] SELinux: failed to load policy [ 274.176700][ T5959] usb 5-1: selecting invalid altsetting 0 [ 274.190714][ T5838] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 274.212704][ T5959] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 274.225578][ T5959] usb 5-1: No valid video chain found. [ 274.235474][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.272313][ T5959] usb 5-1: selecting invalid altsetting 0 [ 274.279156][ T5838] usb 2-1: config 0 descriptor?? [ 274.285128][ T5959] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 274.337302][ T5959] usb 5-1: USB disconnect, device number 15 [ 274.445941][ T8725] loop5: detected capacity change from 0 to 2271 [ 274.611789][ T7059] Buffer I/O error on dev loop5, logical block 283, async page read [ 274.728900][ T30] audit: type=1400 audit(1753414365.318:431): avc: denied { read } for pid=8705 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.942018][ T30] audit: type=1400 audit(1753414365.538:432): avc: denied { create } for pid=8733 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.945427][ T8734] netlink: 'syz.4.743': attribute type 21 has an invalid length. [ 274.983856][ T8734] netlink: 156 bytes leftover after parsing attributes in process `syz.4.743'. [ 275.275034][ T30] audit: type=1400 audit(1753414365.538:433): avc: denied { ioctl } for pid=8733 comm="syz.4.743" path="socket:[18614]" dev="sockfs" ino=18614 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 275.317252][ T8734] netlink: 'syz.4.743': attribute type 21 has an invalid length. [ 275.433544][ T8734] netlink: 6 bytes leftover after parsing attributes in process `syz.4.743'. [ 275.641579][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.649109][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.684305][ T8742] bridge0: entered allmulticast mode [ 275.848773][ T5838] usbhid 2-1:0.0: can't add hid device: -71 [ 275.867790][ T5838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.877871][ T5838] usb 2-1: USB disconnect, device number 31 [ 275.895359][ T8742] bridge_slave_1: left allmulticast mode [ 275.901684][ T8742] bridge_slave_1: left promiscuous mode [ 275.907490][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.919026][ T8742] bridge_slave_0: left allmulticast mode [ 275.935466][ T8742] bridge_slave_0: left promiscuous mode [ 275.980249][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.120750][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.172648][ T30] audit: type=1400 audit(1753414366.738:434): avc: denied { ioctl } for pid=8749 comm="syz.2.745" path="socket:[18641]" dev="sockfs" ino=18641 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.346468][ T8753] fuse: Unknown parameter '01777777777777777777777t_?JGЇEh:43>TNbbLɑ0>-~vhRY.!&RD;vȣ_$< [ 276.346468][ T8753] m' [ 276.726465][ T30] audit: type=1400 audit(1753414366.958:435): avc: denied { connect } for pid=8747 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.751403][ T10] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 276.766380][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.786754][ T10] usb 5-1: Product: syz [ 276.797234][ T10] usb 5-1: Manufacturer: syz [ 276.808038][ T10] usb 5-1: SerialNumber: syz [ 276.830466][ T10] usb 5-1: config 0 descriptor?? [ 276.850806][ T5892] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 277.020780][ T5892] usb 3-1: device descriptor read/64, error -71 [ 277.311399][ T5892] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 277.523572][ T5892] usb 3-1: device descriptor read/64, error -71 [ 277.814566][ T5892] usb usb3-port1: attempt power cycle [ 277.862642][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 278.510822][ T5892] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 278.608354][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.617499][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.819700][ T8768] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 278.830549][ T8770] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 279.025471][ T5892] usb 3-1: device descriptor read/8, error -71 [ 279.035893][ T8768] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 279.048022][ T8770] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 279.150891][ T2161] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 279.406803][ T30] audit: type=1400 audit(1753414369.988:436): avc: denied { remount } for pid=8774 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 279.503263][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.530716][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 279.653645][ T30] audit: type=1400 audit(1753414369.988:437): avc: denied { listen } for pid=8774 comm="syz.1.752" lport=33201 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.688126][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 279.982270][ T30] audit: type=1400 audit(1753414370.108:438): avc: denied { accept } for pid=8774 comm="syz.1.752" lport=33201 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.990741][ T5892] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.024335][ T10] usb 5-1: USB disconnect, device number 16 [ 280.181132][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 280.188834][ T5892] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 280.200122][ T5892] usb 3-1: config 0 has no interface number 0 [ 280.215461][ T5892] usb 3-1: config 0 interface 54 has no altsetting 0 [ 280.271802][ T5892] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 280.281290][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.300688][ T5892] usb 3-1: Product: syz [ 280.318475][ T5892] usb 3-1: Manufacturer: syz [ 280.330734][ T5892] usb 3-1: SerialNumber: syz [ 280.346916][ T5892] usb 3-1: config 0 descriptor?? [ 280.603053][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.612897][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.692176][ T5892] ums_eneub6250 3-1:0.54: USB Mass Storage device detected [ 281.233360][ T30] audit: type=1400 audit(1753414371.818:439): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 281.289353][ T5892] usb 3-1: USB disconnect, device number 20 [ 281.316949][ T30] audit: type=1400 audit(1753414371.908:440): avc: denied { name_connect } for pid=8798 comm="syz.3.759" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 282.285639][ T8822] nbd2: detected capacity change from 0 to 1024 [ 282.375820][ T8823] nbd2: detected capacity change from 1024 to 67108884 [ 282.495821][ T7059] block nbd2: Send control failed (result -89) [ 282.673734][ T7059] block nbd2: Request send failed, requeueing [ 282.700150][ T5839] block nbd2: Receive control failed (result -32) [ 282.733832][ T11] block nbd2: Dead connection, failed to find a fallback [ 282.741070][ T11] block nbd2: shutting down sockets [ 282.746471][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.757871][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.766149][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.778661][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.787034][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.796568][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.805159][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.814325][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.822204][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.833397][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.841543][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.850760][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.853278][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 282.858622][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.877750][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.887760][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.897538][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.905484][ T7059] ldm_validate_partition_table(): Disk read failed. [ 282.912789][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.922001][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 282.929951][ T7059] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.986733][ T7059] Buffer I/O error on dev nbd2, logical block 0, async page read [ 283.009272][ T7059] Dev nbd2: unable to read RDB block 0 [ 283.022826][ T7059] nbd2: unable to read partition table [ 283.048857][ T7059] ldm_validate_partition_table(): Disk read failed. [ 283.090828][ T7059] Dev nbd2: unable to read RDB block 0 [ 283.105922][ T7059] nbd2: unable to read partition table [ 284.462642][ T8851] team0: Cannot enslave team device to itself [ 284.602003][ T30] audit: type=1400 audit(1753414375.198:441): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 285.308835][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 286.002276][ T8877] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 286.042742][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.096304][ T8877] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.133175][ T30] audit: type=1400 audit(1753414376.728:442): avc: denied { mount } for pid=8881 comm="syz.1.784" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 286.201013][ T30] audit: type=1400 audit(1753414376.788:443): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 286.244202][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.786'. [ 287.061640][ T5878] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 287.290884][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 287.399991][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.411804][ T8899] ubi31: attaching mtd0 [ 287.417232][ T8899] ubi31: scanning is finished [ 287.421913][ T8899] ubi31: empty MTD device detected [ 287.429607][ T5878] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 287.438792][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.456679][ T5878] usb 2-1: config 0 descriptor?? [ 287.544976][ T8899] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 287.553627][ T8899] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 287.561244][ T8899] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 287.568339][ T8899] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 287.619207][ T8899] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 287.626116][ T8899] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 287.634215][ T8899] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2820626448 [ 287.644274][ T8899] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 287.667876][ T8907] ubi31: background thread "ubi_bgt31d" started, PID 8907 [ 287.837282][ T8912] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 288.041972][ T5892] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 288.113858][ T5878] asus 0003:0B05:17E0.000A: item fetching failed at offset 2/5 [ 288.300770][ T5892] usb 3-1: device descriptor read/64, error -71 [ 288.319764][ T5878] asus 0003:0B05:17E0.000A: Asus hid parse failed: -22 [ 288.339479][ T5878] asus 0003:0B05:17E0.000A: probe with driver asus failed with error -22 [ 288.400387][ T5878] usb 2-1: USB disconnect, device number 33 [ 288.408152][ T30] audit: type=1400 audit(1753414378.988:444): avc: denied { shutdown } for pid=8922 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.581241][ T5892] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 288.768844][ T5892] usb 3-1: device descriptor read/64, error -71 [ 288.891275][ T5892] usb usb3-port1: attempt power cycle [ 289.311799][ T5892] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 289.339121][ T5892] usb 3-1: device descriptor read/8, error -71 [ 289.575189][ T8944] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 289.587804][ T8944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.602318][ T5892] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 289.641738][ T5892] usb 3-1: device descriptor read/8, error -71 [ 289.808292][ T5892] usb usb3-port1: unable to enumerate USB device [ 290.731018][ T8972] xt_hashlimit: max too large, truncated to 1048576 [ 291.277861][ T8974] overlayfs: failed to resolve './file0/../file0': -2 [ 291.279739][ T30] audit: type=1400 audit(1753414381.868:445): avc: denied { create } for pid=8970 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 291.601472][ T30] audit: type=1400 audit(1753414382.198:446): avc: denied { execmem } for pid=8979 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 291.715534][ T8971] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 291.725786][ T8971] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 291.761084][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 291.870995][ T8984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.808'. [ 292.225206][ T8993] Invalid source name [ 292.229282][ T8993] UBIFS error (pid: 8993): cannot open "ubifs", error -22 [ 292.633306][ T9001] 9pnet_fd: Insufficient options for proto=fd [ 292.775138][ T30] audit: type=1400 audit(1753414383.358:447): avc: denied { read } for pid=9004 comm="syz.0.814" name="file0" dev="fuse" ino=18446744073709551612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 293.159531][ T30] audit: type=1400 audit(1753414383.358:448): avc: denied { open } for pid=9004 comm="syz.0.814" path="/158/file0/file0" dev="fuse" ino=18446744073709551612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 293.713250][ T30] audit: type=1400 audit(1753414383.358:449): avc: denied { ioctl } for pid=9004 comm="syz.0.814" path="/158/file0/file0" dev="fuse" ino=18446744073709551612 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 296.034691][ T30] audit: type=1400 audit(1753414386.618:450): avc: denied { execute } for pid=9031 comm="syz.0.818" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 297.281433][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 297.323630][ T30] audit: type=1400 audit(1753414387.178:451): avc: denied { read write } for pid=9035 comm="syz.1.819" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.559770][ T30] audit: type=1400 audit(1753414387.178:452): avc: denied { open } for pid=9035 comm="syz.1.819" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.610784][ T30] audit: type=1400 audit(1753414388.198:453): avc: denied { create } for pid=9047 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.654746][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 297.665010][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 297.710614][ T30] audit: type=1400 audit(1753414388.248:454): avc: denied { write } for pid=9047 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.748523][ T30] audit: type=1400 audit(1753414388.248:455): avc: denied { nlmsg_write } for pid=9047 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 300.225992][ T9050] syz.3.823 (9050) used greatest stack depth: 17288 bytes left [ 300.660168][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.660198][ T10] usb 3-1: Product: syz [ 300.660214][ T10] usb 3-1: Manufacturer: syz [ 300.660230][ T10] usb 3-1: SerialNumber: syz [ 300.676892][ T10] usb 3-1: config 0 descriptor?? [ 300.680697][ T10] usb 3-1: can't set config #0, error -71 [ 300.727143][ T10] usb 3-1: USB disconnect, device number 25 [ 301.094759][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 301.613598][ T9077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.465760][ T9080] vlan2: entered promiscuous mode [ 302.473573][ T9080] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.482786][ T9080] vlan2: entered allmulticast mode [ 302.488902][ T9080] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 303.908679][ T30] audit: type=1400 audit(1753414394.498:456): avc: denied { listen } for pid=9097 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.005206][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.017197][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.032185][ T30] audit: type=1400 audit(1753414394.628:457): avc: denied { accept } for pid=9097 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.169777][ T9107] trusted_key: encrypted_key: insufficient parameters specified [ 304.282491][ T9109] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 304.370123][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 304.547627][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.842'. [ 304.567229][ T9114] unknown channel width for channel at 909000KHz? [ 304.987599][ T9116] loop8: detected capacity change from 0 to 79 [ 305.102020][ T9116] loop8: detected capacity change from 79 to 78 [ 305.929267][ T9130] SET target dimension over the limit! [ 305.946686][ T9129] SET target dimension over the limit! [ 305.964169][ T30] audit: type=1400 audit(1753414396.558:458): avc: denied { getopt } for pid=9132 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.987217][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.988234][ T9133] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 306.025906][ T9133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.054021][ T9133] bond1: (slave gretap1): making interface the new active one [ 306.063890][ T9133] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 306.292625][ T9139] overlayfs: failed to resolve './file0': -2 [ 306.347270][ T9138] 9pnet_fd: Insufficient options for proto=fd [ 306.402670][ T9133] bond1 (unregistering): (slave gretap1): Releasing active interface [ 306.561103][ T9133] bond1 (unregistering): Released all slaves [ 307.124167][ T30] audit: type=1400 audit(1753414397.708:459): avc: denied { read } for pid=9142 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 307.303097][ T30] audit: type=1400 audit(1753414397.898:460): avc: denied { write } for pid=9144 comm="syz.2.851" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 307.370861][ T9150] random: crng reseeded on system resumption [ 307.610743][ T5899] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 308.165034][ T30] audit: type=1400 audit(1753414398.758:461): avc: denied { listen } for pid=9155 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 308.188091][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.345075][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.378532][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.924395][ T5899] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.966909][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.005886][ T5899] usb 2-1: config 0 descriptor?? [ 309.460990][ T5892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 309.622149][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.640891][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.654841][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 309.684394][ T5892] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 309.715001][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.755079][ T5892] usb 3-1: config 0 descriptor?? [ 309.833293][ T9176] ------------[ cut here ]------------ [ 309.839908][ T9176] WARNING: CPU: 1 PID: 9176 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 309.852373][ T9176] Modules linked in: [ 309.857315][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.0.856 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 309.871828][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.883966][ T9176] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 309.892160][ T9176] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf 27 75 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 7d 45 7d 0e 00 75 0b c6 05 74 45 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 309.916372][ T9176] RSP: 0018:ffffc900055af4f8 EFLAGS: 00010246 [ 309.923983][ T9176] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 309.933737][ T9176] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 309.943355][ T9176] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 309.952980][ T9176] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 309.962842][ T9176] R13: 1ffff92000ab5eb4 R14: 0000000400000000 R15: 0000000000000016 [ 309.972474][ T9176] FS: 00007f18a1e266c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 309.983354][ T9176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.991324][ T9176] CR2: 0000200000001000 CR3: 00000000593a8000 CR4: 00000000003526f0 [ 310.000973][ T9176] Call Trace: [ 310.004917][ T9176] [ 310.008450][ T9176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.016543][ T9176] ? rcu_is_watching+0x12/0xc0 [ 310.022578][ T9176] ? trace_kmem_cache_alloc+0x28/0xc0 [ 310.029024][ T9176] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 310.035889][ T9176] ? hashtab_init+0x1b1/0x290 [ 310.041533][ T9176] __alloc_pages_noprof+0xb/0x1b0 [ 310.047560][ T9176] ___kmalloc_large_node+0x84/0x1e0 [ 310.053836][ T9176] ? hashtab_init+0x1b1/0x290 [ 310.059447][ T9176] __kmalloc_large_node_noprof+0x1c/0x70 [ 310.066239][ T9176] ? __pfx_ebitmap_read+0x10/0x10 [ 310.072341][ T9176] __kmalloc_noprof.cold+0xc/0x61 [ 310.078350][ T9176] hashtab_init+0x1b1/0x290 [ 310.083769][ T9176] ? __asan_memcpy+0x3c/0x60 [ 310.089317][ T9176] policydb_read+0x7b4/0x3220 [ 310.094939][ T9176] ? __pfx_policydb_read+0x10/0x10 [ 310.101117][ T9176] security_load_policy+0x15c/0x12c0 [ 310.107451][ T9176] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.113756][ T9176] ? __pfx_security_load_policy+0x10/0x10 [ 310.120973][ T9176] ? rep_movs_alternative+0x4a/0x90 [ 310.127221][ T9176] sel_write_load+0x332/0x1bd0 [ 310.133166][ T9176] ? __pfx___schedule+0x10/0x10 [ 310.138979][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.145248][ T9176] ? irqentry_exit+0x3b/0x90 [ 310.150769][ T9176] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.157015][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.163271][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.169498][ T9176] vfs_write+0x2a0/0x1150 [ 310.174707][ T9176] ? __pfx___mutex_lock+0x10/0x10 [ 310.180731][ T9176] ? __pfx_vfs_write+0x10/0x10 [ 310.186439][ T9176] ? __fget_files+0x20e/0x3c0 [ 310.192189][ T9176] ksys_write+0x12a/0x250 [ 310.197373][ T9176] ? __pfx_ksys_write+0x10/0x10 [ 310.203235][ T9176] do_syscall_64+0xcd/0x4c0 [ 310.208632][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.215760][ T9176] RIP: 0033:0x7f18a0f8e9a9 [ 310.221371][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.245122][ T9176] RSP: 002b:00007f18a1e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.255272][ T9176] RAX: ffffffffffffffda RBX: 00007f18a11b5fa0 RCX: 00007f18a0f8e9a9 [ 310.264834][ T9176] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 310.274650][ T9176] RBP: 00007f18a1010d69 R08: 0000000000000000 R09: 0000000000000000 [ 310.284219][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.293793][ T9176] R13: 0000000000000000 R14: 00007f18a11b5fa0 R15: 00007fffb0d78c78 [ 310.303397][ T9176] [ 310.306997][ T9176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.315718][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.0.856 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 310.329958][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.342007][ T9176] Call Trace: [ 310.345921][ T9176] [ 310.349449][ T9176] dump_stack_lvl+0x3d/0x1f0 [ 310.354938][ T9176] panic+0x71c/0x800 [ 310.359605][ T9176] ? __pfx_panic+0x10/0x10 [ 310.364889][ T9176] ? show_trace_log_lvl+0x29b/0x3e0 [ 310.371114][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 310.378368][ T9176] check_panic_on_warn+0xab/0xb0 [ 310.384273][ T9176] __warn+0xf6/0x3c0 [ 310.388927][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 310.396193][ T9176] report_bug+0x3c3/0x580 [ 310.401398][ T9176] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 310.408664][ T9176] handle_bug+0x184/0x210 [ 310.413831][ T9176] exc_invalid_op+0x17/0x50 [ 310.419204][ T9176] asm_exc_invalid_op+0x1a/0x20 [ 310.425024][ T9176] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 310.433024][ T9176] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf 27 75 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 7d 45 7d 0e 00 75 0b c6 05 74 45 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 310.456528][ T9176] RSP: 0018:ffffc900055af4f8 EFLAGS: 00010246 [ 310.463784][ T9176] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 310.473322][ T9176] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 310.482923][ T9176] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 310.492486][ T9176] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 310.502030][ T9176] R13: 1ffff92000ab5eb4 R14: 0000000400000000 R15: 0000000000000016 [ 310.511590][ T9176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.519193][ T9176] ? rcu_is_watching+0x12/0xc0 [ 310.524898][ T9176] ? trace_kmem_cache_alloc+0x28/0xc0 [ 310.531326][ T9176] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 310.538075][ T9176] ? hashtab_init+0x1b1/0x290 [ 310.543674][ T9176] __alloc_pages_noprof+0xb/0x1b0 [ 310.549688][ T9176] ___kmalloc_large_node+0x84/0x1e0 [ 310.555916][ T9176] ? hashtab_init+0x1b1/0x290 [ 310.561518][ T9176] __kmalloc_large_node_noprof+0x1c/0x70 [ 310.568246][ T9176] ? __pfx_ebitmap_read+0x10/0x10 [ 310.574269][ T9176] __kmalloc_noprof.cold+0xc/0x61 [ 310.580275][ T9176] hashtab_init+0x1b1/0x290 [ 310.585669][ T9176] ? __asan_memcpy+0x3c/0x60 [ 310.591167][ T9176] policydb_read+0x7b4/0x3220 [ 310.596766][ T9176] ? __pfx_policydb_read+0x10/0x10 [ 310.602889][ T9176] security_load_policy+0x15c/0x12c0 [ 310.609221][ T9176] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.615439][ T9176] ? __pfx_security_load_policy+0x10/0x10 [ 310.622274][ T9176] ? rep_movs_alternative+0x4a/0x90 [ 310.628486][ T9176] sel_write_load+0x332/0x1bd0 [ 310.634179][ T9176] ? __pfx___schedule+0x10/0x10 [ 310.639997][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.646222][ T9176] ? irqentry_exit+0x3b/0x90 [ 310.651706][ T9176] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.657930][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.664147][ T9176] ? __pfx_sel_write_load+0x10/0x10 [ 310.670366][ T9176] vfs_write+0x2a0/0x1150 [ 310.675549][ T9176] ? __pfx___mutex_lock+0x10/0x10 [ 310.681552][ T9176] ? __pfx_vfs_write+0x10/0x10 [ 310.687248][ T9176] ? __fget_files+0x20e/0x3c0 [ 310.692838][ T9176] ksys_write+0x12a/0x250 [ 310.698018][ T9176] ? __pfx_ksys_write+0x10/0x10 [ 310.703836][ T9176] do_syscall_64+0xcd/0x4c0 [ 310.709208][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.716249][ T9176] RIP: 0033:0x7f18a0f8e9a9 [ 310.721543][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.745064][ T9176] RSP: 002b:00007f18a1e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.755153][ T9176] RAX: ffffffffffffffda RBX: 00007f18a11b5fa0 RCX: 00007f18a0f8e9a9 [ 310.764689][ T9176] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 310.774225][ T9176] RBP: 00007f18a1010d69 R08: 0000000000000000 R09: 0000000000000000 [ 310.783764][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.793297][ T9176] R13: 0000000000000000 R14: 00007f18a11b5fa0 R15: 00007fffb0d78c78 [ 310.802878][ T9176] [ 310.806686][ T9176] Kernel Offset: disabled [ 310.811845][ T9176] Rebooting in 86400 seconds..